Home Malware Programs Trojans Trojan.BAT.KillAV.kj

Trojan.BAT.KillAV.kj

Posted: March 23, 2011

Trojan.BAT.KillAV.kj is a malicious trojan infection that opens a backdoor on the targeted computer system. Trojan.BAT.KillAV.kj also logs keystrokes and transmits this information to distant servers. Trojan.BAT.KillAV.kj often corrupts computer without user's consent at the background. Trojan.BAT.KillAV.kj will initiate automatically when computer boots up and will download files to the computer without authorization, which will lead to security risk. Trojan.BAT.KillAV.kj can even enable the attacker to gain remote access to the corrupted computer. Trojan.BAT.KillAV.kj can propagate via network if the malicious drive is shared at the network.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Windir%\svcr.exe
    2 c:\superkill.bat

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\WinRAR SFXHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2bf41070-b2b1-21d1-b5c1-0305f4055515}
Loading...