Threat Database Trojans Win-Trojan/KillAv.3102944

Win-Trojan/KillAv.3102944

By Domesticus in Trojans

Win-Trojan/KillAv.3102944 is a Windows platform Trojan horse that attempts to terminate any security software running on an infected PC. Once inside a computer, Win-Trojan/KillAv.3102944 will make the Task Manager and Registry Editor tools inaccessible to the user of a compromised PC. Win-Trojan/KillAv.3102944 will also scan the system for windows with the following names, and then remove them:

* Norton AntiVirus
* McAfee Firewall
* VirusScan
* Sophos AntiVirus
* Panda AntiVirus Titanium
* F-Secure Anti-Virus
* ZoneAlarm

A start-up registry entry will also be created to ensure that Win-Trojan/KillAv.3102944 is executed each time the system is started up. Ensure that your antivirus database is updated with the latest malware and perform a full scan of your computer to detect and remove Win-Trojan/KillAv.3102944.

File System Details

Win-Trojan/KillAv.3102944 may create the following file(s):
# File Name Detections
1. %AppData%\AnVir\Tray\Internet Explorer.lnk
2. %AppData%\AnVir\detectPr.dat
3. %AppData%\AnVir\Tray\Windows Explorer.lnk
4. %AppData%\AnVir\lnkcash.dat
5. %AppData%\AnVir\Tray\Windows Messenger.lnk
6. %AppData%\AnVir\startup.dat

Registry Details

Win-Trojan/KillAv.3102944 may create the following registry entry or registry entries:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\DriveIcons\C\DefaultIcon]
[HKEY_CURRENT_USER\Software\AnVir]

Trending

Most Viewed

Loading...