Trojan.Rikamanu is a Trojan that steals information from the computers that it infects. It creates the following files on infected systems:
- %Windir% \ Help \ CNDY.DAT
- %System% \ drivers \ Irmon.dll
In addition to creating these files, it also creates the following registry entry:
- HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Services \ irmon
Finding these files and this registry setting is an indication that you are infected with this Trojan. Before removing the infection, backup your registry following the steps here.
Then, remove the infection as follows:
- Press [Windows Key] + [R], type REGEDIT and click OK.
- Delete the registry key: HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Services \ irmon
- Close the Registry Editor and re-boot your PC.