Trojan.Win32.KillFiles.ac

Technical Details

This Trojan has a malicious payload. This Trojan is a Windows PE EXE file. It is 35328 bytes in size.

Payload

The Trojan runs the following commands within its working folder:

echo del *.txt
echo del *.doc
echo del *.xls
echo del *.com
echo del *.dll
echo del *.dot
echo del *.bin
echo del *.htm
echo del *.ppt
echo del *.avi
echo del *.mp3
echo del *.src
echo del *.bmp
echo del *.cfg
echo del *.mpg
echo del *.drv
echo del *.vxd
echo del *.mdb

This will lead to all files with the extensions shown above being deleted from the Trojan’s working folder.

Removal instructions

If your computer does not have an up-to-date antivirus, or does not have an antivirus solution at all, follow the instructions below to delete the malicious program:

1. Delete the original Trojan file (the location will depend on how the program originally penetrated the victim machine).
2. Update your antivirus databases and perform a full scan of the computer (download a trial version of Kaspersky Anti-Virus).