Sophos

Troj/KillAV-EA

Aliases
  • Trojan.Win32.Obfuscated.en;
  • Trojan.Win32.KillAV.ka;
  • TROJ_KILLAV.DY
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Drops more malware
Included in our products from October 2007 (4.22)
Protection available since 23 August 2007 09:30:27 (GMT)
Detected by All Sophos products

Action

More Information

Troj/KillAV-EA is a Trojan for the Windows platform.

Troj/KillAV-EA may appear in the form of an installer for "3wPlayer" application. When Troj/KillAV-EA is executed, the following files are installed in addition to the media player:

<Program Files>\gridhopefirst\bib dent real.exe - detected as Troj/Swizzor-NJ
<Program Files>\gridhopefirst\dkptivyh.exe - detected as Troj/KillAV-EA
<Program Files>\gridhopefirst\minime.exe - detected as Troj/KillAV-EA
<Program Files>\gridhopefirst\savepeak.exe - detected as Troj/KillAV-EA
<Program Files>\3wPlayer\minime.exe - detected as Troj/KillAV-EA
<System>\drivers\iinipn.sys - detected as Troj/KillAV-DW
<System>\wmfptc32.dl_ - detected as Troj/KillAV-DW

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer