Trojan.Win32.Killlav

· Overview ·
· Origins ·
· Operation ·
· Detection and Removal ·
· Research ·

Overview
Category:	AV Killer: Any hacker tool intended to disable a user's anti-virus software to help elude detection. Some will also disable personal firewalls.
Variants:	Trojan.Win32.Killlav.ah Trojan.Win32.Killlav.an Trojan.Win32.Killlav.ap Trojan.Win32.Killlav.at Trojan.Win32.Killlav.ay Trojan.Win32.Killlav.az Trojan.Win32.Killlav.bc Trojan.Win32.Killlav.bd Trojan.Win32.Killlav.p Trojan.Win32.Killlav.u
Similar Pests:	AV Killer
Origins
Date of Origin:	Variants from February, 2004 to March, 2004
Operation
Storage Required:	Trojan.Win32.Killlav.an: at least 37 KB Trojan.Win32.Killlav.ap: at least 21 KB Trojan.Win32.Killlav.ay: at least 13 KB Trojan.Win32.Killlav.az: at least 13 KB Trojan.Win32.Killlav.bc: at least 13 KB Trojan.Win32.Killlav.p: at least 9 KB Trojan.Win32.Killlav.u: at least 33 KB
Detection and Removal
Automatic Removal:	PestPatrol detects this. PestPatrol removes this.
Manual Removal:	Follow these steps to remove Trojan.Win32.Killlav from your machine. Begin by backing up your registry and your system, and/or setting a Restore Point, to prevent trouble if you make a mistake.
	Stop Running Processes: Kill these running processes with Task Manager: trojan.win32.killav.an.exe trojan.win32.killav.ap.exe trojan.win32.killav.ay.exe trojan.win32.killav.az.exe trojan.win32.killav.bc.exe trojan.win32.killav.p.exe trojan.win32.killav.u.exe
	Remove Files: Remove these files (if present) with Windows Explorer: trojan.win32.killav.an.exe trojan.win32.killav.ap.exe trojan.win32.killav.ay.exe trojan.win32.killav.az.exe trojan.win32.killav.bc.exe trojan.win32.killav.p.exe trojan.win32.killav.u.exe
Research
File Analyses:	Trojan.Win32.Killlav.an: trojan.win32.killav.an.exe Trojan.Win32.Killlav.ap: trojan.win32.killav.ap.exe Trojan.Win32.Killlav.ay: trojan.win32.killav.ay.exe Trojan.Win32.Killlav.az: trojan.win32.killav.az.exe Trojan.Win32.Killlav.bc: trojan.win32.killav.bc.exe Trojan.Win32.Killlav.p: trojan.win32.killav.p.exe Trojan.Win32.Killlav.u: trojan.win32.killav.u.exe
More Info:	AllTheWeb, AltaVista, AOL Search, Ask Jeeves, Google, HotBot, Lycos, LookSmart, MSN, Yahoo!
Research By:	PestPatrol's Pest Research Center
Last Revised:	June 28, 2004