Trojan.GenericKDV.1210899

Posted: August 28, 2013

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Threat Level:	8/10
Infected PCs:	26

First Seen:	August 28, 2013
Last Seen:	March 7, 2020
OS(es) Affected:	Windows

Trojan.GenericKDV.1210899 is a Trojan downloader that infects specific corporate targets through fraudulent Xerox WorkCentre e-mails, afterward downloading and installing other PC threats, such as the spyware program Trojan Zeus. Because Trojan.GenericKDV.1210899 installs its payload while hiding the attack from the victim, SpywareRemove.com malware experts warn that symptoms of Trojan.GenericKDV.1210899-related attacks may only be detectable through anti-malware utilities and related security tools. As usual for dealing with any high-level threats that may distribute new malware, deleting Trojan.GenericKDV.1210899 should be done as soon as possible to prevent a single compromise of your PC from being exacerbated into a multiple-threat attack campaign.

A Generic Fake E-mail for a Generic (but Effective) Trojan

Although Trojan.GenericKDV.1210899 uses e-mail as its distribution method, Trojan.GenericKDV.1210899 isn't spammed to indiscriminate victims. Instead, Trojan.GenericKDV.1210899 e-mails are sent to addresses corresponding to specific businesses, with tens of thousands of separate Trojan.GenericKDV.1210899-carrying messages already confirmed thus far. The messages are designed to look like generic alerts regarding Xerox office equipment, making them likely to infect the PCs of any office workers who don't exercise proper precautions around unusual file attachments.

PC users who launch the attached ZIP archive will have their computers infected by Trojan.GenericKDV.1210899, which is a specialized Trojan downloader that uses additional software vulnerabilities to install other malware without your permission. Although the full range of Trojan.GenericKDV.1210899's payload has not yet been examined, SpywareRemove.com malware researchers can verify that Trojan.GenericKDV.1210899 installs, amongst other things, a variant of Zeus. Zeus is well-known for using browser-based attack to steal online banking information and sophisticated defensive functions that hide it from sight.

Keeping a Trojan.GenericKDV.1210899 Attack from Turning into a Company-Wide Problem

Trojan.GenericKDV.1210899 and many similar PC threats targeted at private industries usually are best defended against via a combination of anti-malware tools for removing infections after the fact, and common-sense security precautions to prevent their infections in the first place. SpywareRemove.com malware experts especially remind readers that e-mail messages distributing ZIP-archived files are a major vehicle for many types of malware, including other Trojans besides Trojan.GenericKDV.1210899 and that you always should scan these files before trying to open them.

Trojan.GenericKDV.1210899's attacks don't give off any obvious symptoms that would let you know that your PC has been compromised. However, Trojan.GenericKDV.1210899's payload does include PC threats with capabilities geared towards stealing highly confidential information. One of the most well-documented examples of these attacks includes browser injections that insert malicious content into your browser that requests confidential information, all while looking like normal Web content from a trusted bank or other company. In some cases, these PC threats also have shown the ability to compromise network-accessible PCs, and your network security also should be a concern until you're certain that you've removed Trojan.GenericKDV.1210899.

Technical Details

Additional Information

The following messages's were detected:

#	Message
1	'Please download the document. It was scanned and sent to you using a Xerox multifunction device.'