What is LokiBot
LokiBot is a keylogger, aimed at stealing personal data by reading all the keystrokes. In this way, it can get data such as passwords for accounts, data to enter an online bank, your payment information and so on. A feature of this keylogger is that it can display pop-ups that contain information about banking transactions or need to run an online banking application. This prompts the user to enter their personal data. LokiBot changes the Proxy settings to permanently redirect the user to third-party malicious sites. LokiBot is part of the banking Trojan and it works in the background, so many users can not guess that their PC is already infected. In some cases, users note that it can completely lock the computer and display a banner about redemption. The amount indicated in the pop-up reaches $100.
How LokiBot gets on your PC?
As a rule, LokiBot does not come alone, but as part of a bank Trojan. Malicious software infiltrates PCs, hiding in freeware’s installers, downloaders or special web clients. Also, sometimes LokiBot comes as an attachment to emails or as fake updates of programs installed on your PC. It should be noted that we should not neglect following the installation process. Always try to carefully study the list of additional components specified in the installation window. Use special programs and utilities that can protect your PC from such infections. If your computer is already infected with LokiBot, then you can use our detailed instructions to remove it immediately.
How to remove LokiBot from your computer?
To uninstall LokiBot remove it from Control Panel, then delete all files and regkeys.
In our view, there are 3 products that potentially have LokiBot in their database. You can try to use them for removing LokiBot.
Recommended Solution:
Norton is a powerful removal tool. It can remove all instances of newest viruses, similar to LokiBot – files, folders, registry keys.
*Trial version of Norton provides detection of computer viruses for FREE. To remove malware, you have to purchase the full version of Norton.
Alternative Solution:
Norton Antivirus – detects files, registry values and folders of viruses that show the same behavior as LokiBot.
You can try both of these products to remove LokiBot
Or uninstall LokiBot manually.
Step 1: Remove LokiBot from Control Panel
Windows XP:
- Click Start.
- Control Panel.
- Then click Add or Remove Programs.
- Find LokiBot.
- Click Uninstall.
Learn more about uninstallation of programs in Windows XP.
Windows 7/Windows Vista:
- Click Start.
- Then Control Panel.
- Click Uninstall a Program.
- Find LokiBot and click Uninstall.
Learn more about uninstallation of programs in Windows 7.
Windows 8/Windows 8.1:
- Open the Menu.
- Click Search.
- After that click Apps.
- Then Control Panel.
- Then as in Windows 7, click Uninstall a Program under Programs.
- Find LokiBot, select it and click Uninstall.
Learn more about uninstallation of programs in Windows 8 (8.1).
Windows 10:
- Click on the Start button (or press the Windows key) to open the Start menu, click on the Settings at the top.
- Click on App & features on the left menu.
- On the right side, locate LokiBot and click it, then click on the Uninstall button.
- Click on Uninstall to confirm.
Learn more about uninstallation of programs in Windows 10
Note: If you can’t find required program, sort programs by date in Control panel and search for last installed programs.
After that remove LokiBot from your browser.
Step 2: Remove LokiBot from browsers
Google Chrome:
- Open Google Chrome
- Push Alt + F.
- Click Tools.
- Choose Extensions.
- Find LokiBot.
- Click the trash can icon to remove it.
Learn more about removing extensions from Chrome.
Mozilla Firefox:
- Open Firefox.
- Push Shift + Ctrl + A.
- Choose LokiBot.
- Click Disable or Remove button.
Learn more about removing extensions from Firefox.
Internet Explorer:
- Open IE.
- Push Alt + T.
- Click Manage Add-ons.
- Select Toolbars and Extensions.
- Click Disable LokiBot.
- Click More information link in the left-bottom corner.
- Click Remove button.
- If this button is grayed out – perform alternative steps.
Learn more about removing extensions from IE.
Step 3: Remove following files and folders of LokiBot:
Remove following registry entries:
no information
Remove following files:
file.exe
%appdata%\Microsoft\Windows\Start Menu\Programs\Startup\conor.vbe 71
%APPDATA%\chuks.exe
%APPDATA%\conor\conor.exe
%APPDATA%\ASound.exe
%APPDATA%\Trey\nbgfd.exe
%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup\ABSound.exe
%APPDATA%\Microsoft\WHost\w32host.exe
%APPDATA%\mixcver\vscdme.exe
%APPDATA%\Microsoft\WHost\w32host.exe
Remove following folders
no information
Written by Rami Douafi