Internet threat level: 1
Home→Descriptions→Trojan.BAT.KillWin.gh
Trojan.BAT.KillWin.gh
| Detected | Jul 06 2011 07:52 GMT |
| Released | Jul 06 2011 09:33 GMT |
| Published | Sep 19 2011 09:48 GMT |
Payload
Removal instructions
Technical Details
A trojan program. This is a batch file command interpreter (BAT-file). 68 bytes.
Payload
When launched, the trojan deletes all files with the extensions ".exe", ".dll", and ".bat" in the "C:\Windows\" directory
The trojan then shuts down.
Removal instructions
If your computer has not been protected with anti-virus software and has been infected with malware, you will need to take the following actions to delete this:
- Delete the original program file (its location on the infected computer will depend on how the program got onto the computer).
- Run a full Kaspersky Antivirus scan of the computer with updated antivirus databases (download trial version).
MD5: 663c23ff8bed1557ca4005d342af865b
SHA1: 4ba77f7ea5a5c8f2bc9ff14348693270f191790d
This type of behaviour covers malicious programs that delete, block, modify, or copy data, disrupt computer or network performance, but which cannot be classified under any of the behaviours identified above.
This classification also covers “multipurpose” Trojan programs, i.e. those that are capable of conducting several actions at once and which demonstrate several Trojan behaviours in a single program. This means they cannot be indisputably classified as having any single behaviour.
© 1997-2013 Kaspersky Lab ZAO. All Rights Reserved.
Industry-leading Antivirus Software.
Registered trademarks and service marks are the property of their respective owners.
The authors' opinions do not necessarily reflect the official positions of Kaspersky Lab.