Home Malware Programs Trojans Trojan.KillAV

Trojan.KillAV

Posted: December 22, 2006

Threat Metric

Ranking: 10,892
Threat Level: 9/10
Infected PCs: 350,053
First Seen: July 24, 2009
Last Seen: February 20, 2025
OS(es) Affected: Windows

Trojan.KillAV is a Spyware Trojan designed to infiltrate your computer and open a conduit by which large amounts of adware and spyware can be piped to your system. Trojan.KillAV opens up a large security hole on your computer and is a very dangerous threat to the security of your personal and financial data. Trojan.KillAV includes a keylogger, which monitors and records every key you press, and may use your computer to transmit spam emails through your email account. Trojan.KillAV will attempt to shutdown many antivirus and antispyware applications.

Aliases

Trj/CI.A [Panda]KillAV.BIO [AVG]W32/Scar.DXID!tr [Fortinet]Trojan/Win32.Scar [AhnLab-V3]Sus/ComPack-M [Sophos]TR/Spy.Banker.Gen [AntiVir]Trojan.MulDrop2.16567 [DrWeb]Heur.Suspicious [Comodo]Trojan.Generic.5848953 [BitDefender]Trojan.Win32.Scar.dxid [Kaspersky]Win32.TRSpy.Banker [eSafe]Win32:Malware-gen [Avast]Trojan.Gen [Symantec]Win32/KillAV.NLR [NOD32]Artemis!81BDC2E026CF [McAfee]
More aliases (108)

Use SpyHunter to Detect and Remove PC Threats

If you are concerned that malware or PC threats similar to Trojan.KillAV may have infected your computer, we recommend you start an in-depth system scan with SpyHunter. SpyHunter is an advanced malware protection and remediation application that offers subscribers a comprehensive method for protecting PCs from malware, in addition to providing one-on-one technical support service.

* See Free Trial offer below. EULA and Privacy/Cookie Policy.

Why can't I open any program including SpyHunter? You may have a malware file running in memory that kills any programs that you try to launch on your PC. Tip: Download SpyHunter from a clean computer, copy it to a USB thumb drive, DVD or CD, then install it on the infected PC and run SpyHunter's malware scanner.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



nodlogin.exe File name: nodlogin.exe
Size: 553.22 KB (553228 bytes)
MD5: 4b5358532ea3bda02c7113f44e70c3a2
Detection count: 91
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
%windir%\System32\appmgmts.dll File name: appmgmts.dll
Size: 29.18 KB (29184 bytes)
MD5: 48cba0bc3f604a83557c858907e1b883
Detection count: 85
File type: Dynamic link library
Mime Type: unknown/dll
Path: %windir%\System32
Group: Malware file
Last Updated: September 15, 2010
jrggdind.dll, lbssklmm.dll, kjlxwonv.dll File name: jrggdind.dll, lbssklmm.dll, kjlxwonv.dll
Size: 3.64 KB (3648 bytes)
MD5: 480c62ca99f803ffb15b1671449e6c2d
Detection count: 63
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: December 11, 2009
%USERPROFILE%\Bureau\RogueKiller.exe File name: RogueKiller.exe
Size: 64.03 KB (64033 bytes)
MD5: d738735863eb9e07c1c4100a7f58edf7
Detection count: 40
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%\Bureau
Group: Malware file
Last Updated: December 6, 2010
sysrest32.exe File name: sysrest32.exe
Size: 23.55 KB (23552 bytes)
MD5: 66d238f6e3ed819b07059bc508bd45f8
Detection count: 34
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
C:\DRIVERS\WINNTK.lnk File name: WINNTK.lnk
Size: 1.73 MB (1733632 bytes)
MD5: 81bdc2e026cf7f2308871402234d7f6d
Detection count: 5
File type: Shortcut
Mime Type: unknown/lnk
Path: C:\DRIVERS
Group: Malware file
Last Updated: May 6, 2011
csrss.exe, System_File.exe File name: csrss.exe, System_File.exe
Size: 4.73 KB (4736 bytes)
MD5: f995803fbbc857eed007650a1e124f9b
Detection count: 4
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009

Registry Modifications

The following newly produced Registry Values are:

Regexp file mask%TEMP%\w{14,26}.exe .

Related Posts

One Comment

Loading...
Spywareremove.com uses cookies to provide you with a better browsing experience and analyze how users navigate and utilize the Site. By using this Site or clicking on "OK", you consent to the use of cookies. Learn more.