Malware

How to remove “BAT/KillFiles.NKC”?

Malware Removal

The BAT/KillFiles.NKC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What BAT/KillFiles.NKC virus can do?

  • Reads data out of its own binary image
  • Uses Windows utilities for basic functionality
  • Deletes its original binary from disk
  • Exhibits possible ransomware file modification behavior
  • Network activity detected but not expressed in API logs
  • Clears Windows events or logs
  • Clears web history

How to determine BAT/KillFiles.NKC?


File Info:

crc32: EC46EEFC
md5: a16bc9057171a7052053c0f1cef3076a
name: A16BC9057171A7052053C0F1CEF3076A.mlw
sha1: 36f7682c5a778246d1877e5d19d2be73a12329d2
sha256: 4de3205703f59585a1d085390ae4dfb7d8dc5093386ea2dfb2818868242c9b5a
sha512: ce18f8a76d7f82b465a59d9d9d4b2a80af60e32dc9bc6dd3724437b3184036cf413de2bafdc857421949c8adfbe6549f1c99ee145a8eb457c84836865b3ce8cc
ssdeep: 12288:oxmIJQvPkit7uAEJmpTgVwRxhbtt6dM7WvM9Q7uGRR3py:GmoO8it7uAEJmpWwRxGM9Q7uGXZy
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

BAT/KillFiles.NKC also known as:

MicroWorld-eScanTrojan.GenericKD.31167963
FireEyeTrojan.GenericKD.31167963
ALYacTrojan.GenericKD.31167963
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 004fbb2b1 )
BitDefenderTrojan.GenericKD.31167963
K7GWTrojan ( 004fbb2b1 )
Cybereasonmalicious.57171a
CyrenBAT/KillFil.BQ
SymantecDownloader
ESET-NOD32BAT/KillFiles.NKC
APEXMalicious
AvastFileRepMalware
KasperskyTrojan-Ransom.Win32.Encoder.bp
AlibabaTrojan:BAT/KillFiles.144ee9c8
NANO-AntivirusTrojan.Win32.Encoder.fhqgdz
Ad-AwareTrojan.GenericKD.31167963
EmsisoftTrojan.GenericKD.31167963 (B)
ComodoMalware@#2kblctjshz2d7
DrWebTrojan.KillProc.56497
McAfee-GW-EditionBehavesLike.Win32.AdwareLinkury.hh
SophosMal/Generic-S
IkarusTrojan.BAT.KillFiles
MicrosoftRansom:Win32/Genasom
ArcabitTrojan.Generic.D1DB95DB
ZoneAlarmTrojan-Ransom.Win32.Encoder.bp
GDataTrojan.GenericKD.31167963
CynetMalicious (score: 100)
McAfeeArtemis!A16BC9057171
VBA32TrojanRansom.Encoder
MalwarebytesGeneric.Malware/Suspicious
PandaTrj/CI.A
TencentWin32.Trojan.Encoder.Lkdn
MAXmalware (ai score=89)
FortinetBAT/KillFiles.NKB!tr
AVGFileRepMalware
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.Ransom.4c6

How to remove BAT/KillFiles.NKC?

BAT/KillFiles.NKC removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment