Overview
Category:
AV Killer: Any hacker tool intended to disable a user's anti-virus software to help elude detection. Some will also disable personal firewalls.
Variants:
Similar Pests:
Origins
Programming Language:
Date of Origin:
Distribution
Prevalence:
Clot Factor:
The "Clot Factor" is a measure of how much a pest "gums up" a machine by adding registry entries, files, and directories. As more objects are placed in a machine, manual removal becomes more difficult and more error-prone.
Growth:
Operation
Storage Required:
Detection and Removal
Automatic Removal:
PestPatrol detects this.
PestPatrol removes this.
Manual Removal:
Kill these running processes with Task Manager:
Go To the key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run.
If you find the value HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\w1n32.dll, delete it and reboot the machine immediately.
Unregister these DLLs with Regsvr32, then reboot:
Remove these registry items (if present) with RegEdit:
Remove these files (if present) with Windows Explorer:
Research
File Analyses:
- Trojan.Win32.Killav.aj: repair.exe
- Trojan.Win32.Killav.al: Trojan.Win32.Killav.al.exe
- Trojan.Win32.Killav.am: trojan.win32.killav.am.exe
- Trojan.Win32.Killav.ao: Trojan.Win32.Killav.ao.exe
- Trojan.Win32.Killav.ar: trojan.win32.killav.ar.exe
- Trojan.Win32.Killav.au: trojan.win32.killav.au.exe
- Trojan.Win32.Killav.ba: trojan.win32.killav.ba.exe
- Trojan.Win32.Killav.bd: kvkiller.exe · read it.txt
- Trojan.Win32.Killav.bf: b59e2597ad6941579511466c4694f81a.exe
- Trojan.Win32.Killav.bj: readme.txt
- Trojan.Win32.Killav.bk: fsize.c · fsize.exe · hide.c · hide.exe · hp.c · hp.exe · ipg.c · ipg.exe · kav.c · kav.exe · kill.c · kill.exe · kl.c · kl.exe · nbc.c · nbc.exe · nrx.c · nrx.exe · ping.c · ping.exe · ps.c · ps.exe · readme · smsp.c · smsp.exe
- Trojan.Win32.Killav.bl: trojan.win32.killav.bl.exe
- Trojan.Win32.Killav.bn: trojan.win32.killav.bn.exe
- Trojan.Win32.Killav.br: mserv.exe · wingua.exe
- Trojan.Win32.Killav.bz: Trojan.Win32.Killav.bz.exe
- Trojan.Win32.Killav.cf: anti virus and firewall killer v1.exe
- Trojan.Win32.Killav.cp: Trojan.Win32.Killav.cp.exe
- Trojan.Win32.Killav.cy: Trojan.Win32.Killav.cy.exe
- Trojan.Win32.Killav.d: trojan.win32.killav.d.exe
- Trojan.Win32.Killav.i: trojan.win32.killav.i.exe
- Trojan.Win32.Killav.q: winlogon .exe
- Trojan.Win32.Killav.t: trojan.win32.killav.t.exe
- Trojan.Win32.Killav.x: trojan.win32.killav.x.exe
- Trojan.Win32.Killav.y: trojan.win32.killav.y.exe