Trojan.Win32.Berok or Berok is a trojan that runs on Microsoft Windows.

Berok installs a new desktop background. The Trojan itself is a Windows PE .EXE file 45,056 bytes in size.


Berok contains a .BMP file 40,150 bytes in size.

When launched, the Trojan drops this file to the Windows root directory


The desktop background will then be changed to the image contained in this file.

Removal InstructionsEdit

  1. Delete desktop.bmp from %WinDir%.
  2. Delete the main program.

Media Edit

Ad blocker interference detected!

Wikia is a free-to-use site that makes money from advertising. We have a modified experience for viewers using ad blockers

Wikia is not accessible if you’ve made further modifications. Remove the custom ad blocker rule(s) and the page will load as expected.