Categories: Malware

What is “BAT/KillFiles.NOB”?

The BAT/KillFiles.NOB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What BAT/KillFiles.NOB virus can do?

Attempts to repeatedly call a single API many times in order to delay analysis time
Exhibits possible ransomware file modification behavior
Creates a hidden or system file
Network activity detected but not expressed in API logs
Clears Windows events or logs
Anomalous binary characteristics

How to determine BAT/KillFiles.NOB?


File Info:
crc32: 38B6F5D0md5: 37ab838dfbd17afe26c93efa5aa678bename: 37AB838DFBD17AFE26C93EFA5AA678BE.mlwsha1: 3930efd00aeb2d4de9d6982a0493591ced4f7b55sha256: 308c8a727098ed5322f4978e92106c0130aa74010428e77504fdb48eb5a5db75sha512: 769e952779a4a2a7ff0171819d8267152bb24ac047729fc850c5ffb5d0062e496df59bb496d43a6546997c516aa39d161288851b174e75de7e04c9d35de98c20ssdeep: 6144:E5aWbksiNTB7SMEPRvT1Rjja4su15S2CV:E5atNTxSxPBTrCVtype: PE32 executable (console) Intel 80386, for MS Windows
Version Info:
0: [No Data]

BAT/KillFiles.NOB also known as:

K7AntiVirus	Riskware ( 0040eff71 )
Lionic	Trojan.Win32.KillFiles.4!c
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_100% (W)
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.00aeb2
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	BAT/KillFiles.NOB
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	UDS:Trojan.Win32.KillFiles
Alibaba	Trojan:Win32/KillFiles.1a13d4d8
Sophos	Mal/Generic-S
Comodo	Malware@#1777zt08rempv
BitDefenderTheta	Gen:NN.ZexaF.34142.CuW@a896Zcf
McAfee-GW-Edition	BehavesLike.Win32.Emotet.gm
FireEye	Generic.mg.37ab838dfbd17afe
SentinelOne	Static AI – Malicious PE
Microsoft	Ransom:Win32/Genasom
ZoneAlarm	HEUR:Trojan.Win32.KillFiles
AhnLab-V3	Malware/Win32.Generic.C2884393
McAfee	Artemis!37AB838DFBD1
MAX	malware (ai score=99)
Malwarebytes	Malware.Heuristic.1008
Panda	Trj/Genetic.gen
Rising	Trojan.Generic@ML.93 (RDML:fGAsrERm2EeqvpAPnOeftA)
Yandex	Trojan.KillFiles!19c6VqGCgKI
Ikarus	Trojan-Ransom.Rokku
MaxSecure	Trojan.Malware.300983.susgen
Paloalto	generic.ml