Home Malware Programs Trojans Win-Trojan/KillAv.3102944

Win-Trojan/KillAv.3102944

Posted: February 24, 2010

Win-Trojan/KillAv.3102944 is a malicious Trojan which stealthily enters the computer and comes armed with spyware capabilities. Win-Trojan/KillAv.3102944 has the ability to record keystrokes, download malicious files from the Internet and populate the system registry with malicious entries. Win-Trojan/KillAv.3102944 may open up a backdoor for corrupt files and data to be stored on the infected system, making valuable information vulnerable to theft. Win-Trojan/KillAv.3102944 can run in the background and load-up undetected, which is why it should be removed using a reliable anti-spyware program.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %AppData%\AnVir\detectPr.dat
    2 %AppData%\AnVir\lnkcash.dat
    3 %AppData%\AnVir\startup.dat
    4 %AppData%\AnVir\Tray\Internet Explorer.lnk
    5 %AppData%\AnVir\Tray\Windows Explorer.lnk
    6 %AppData%\AnVir\Tray\Windows Messenger.lnk

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}[HKEY_CURRENT_USER\Software\AnVir][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\DriveIcons\C\DefaultIcon]
Loading...