Trojan.Win32.KillAV.id
| Alert Level : | Medium |
| Discovered: | Nov 20 2006 |
| Tag: | Trojans |
| Discoverer and Source: | http://www.kaspersky.com/ |
Malware Behavior and Technical Description
This Trojan terminates a number of legal applications. It is a Windows PE EXE file. It is 3104 bytes in size, and packed using UPX. The unpacked file is approximately 13KB in size.
Payload
The Trojan terminates the processes listed below:
_AVPCC.EXE _AVPM.EXE _FINDVIRU.EXE ACKWIN32.EXE ALOGSERV.EXE AMON.EXE ANTI-TROJAN.EXE APVXDWIN.EXE AVE32.EXE AVKSERV.EXE AVNT.EXE AVPCC.EXE AVPM.EXE AVWIN95.EXE CLAW95CF.EXE ECENGINE.EXE ESAFE.EXE FINDVIRU.EXE FPROT.EXE F-PROT95.EXE FP-WIN.EXE GUARDDOG.EXE IOMON98.EXE NAVAPSVC.EXE NAVAPW32.EXE NAVNT.EXE NAVW32.EXE NAVWNT.EXE NOD32.EXE NSPLUGIN.EXE OGRC.EXE RAV7.EXE RULAUNCH.EXE SCAN32.EXE SPIDER.EXE VET95.EXE VETTRAY.EXE VSMAIN.EXE
Removal Trojan.Win32.KillAV.id instructions:
- Reboot the computer in Safe Mode (at the start of the boot sequence, press and hold F8, then choose Safe Mode from the Windows boot menu).
- Delete the original Trojan file (the location will depend on how the program originally penetrated the victim machine).
- Update your antivirus databases and perform a full scan of the computer (download a trial version of Kaspersky Anti-Virus).
Need help? Live computer support via remote at SupportSpace |
