What is "BAT/KillFiles.NPV"?

The BAT/KillFiles.NPV is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What BAT/KillFiles.NPV virus can do?

Attempts to repeatedly call a single API many times in order to delay analysis time
Network activity detected but not expressed in API logs
Anomalous binary characteristics
Uses suspicious command line tools or Windows utilities

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine BAT/KillFiles.NPV?


File Info:
crc32: 960335A2
md5: c38ce8bacaf4d750de5e571635c2fbf7
name: C38CE8BACAF4D750DE5E571635C2FBF7.mlw
sha1: 57d4a8b1bd6ea8f29b310c995a9f232fa0c1f799
sha256: 12ccaade3c8fa9eacd0248318df53ad4404389f0a23fddfd28992ce71461865a
sha512: 6174be409d8a4db05e6e6c836a6c4622168b9d5b37e25c0cf2e8005b7d651221cb311de29f6137d77052eca36285b3abb94b49163ed42d21137e7312c141f95d
ssdeep: 1536:H7fbN3eEDhDPA/pICdUkbBtW7upvaLU0bI5taxKo0IOlnToIfHwnhOX:b7DhdC6kzWypvaQ0FxyNTBfHI2
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:
0: [No Data]

BAT/KillFiles.NPV also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Encoder.trrL
Elastic	malicious (high confidence)
CAT-QuickHeal	Trojan.GenericPMF.S15043657
ALYac	Gen:Heur.Bat.1
Sangfor	Trojan.Win32.Save.a
BitDefender	Gen:Heur.Bat.1
Cybereason	malicious.1bd6ea
Cyren	W32/Kryptik.AYO.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	BAT/KillFiles.NPV
Cynet	Malicious (score: 100)
Kaspersky	Trojan-Ransom.Win32.Encoder.kit
Alibaba	Trojan:BAT/KillFiles.d2b4d314
MicroWorld-eScan	Gen:Heur.Bat.1
Ad-Aware	Gen:Heur.Bat.1
BitDefenderTheta	Gen:NN.ZexaF.34266.fuW@aSf6Fvi
FireEye	Generic.mg.c38ce8bacaf4d750
Emsisoft	Gen:Heur.Bat.1 (B)
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_83%
Antiy-AVL	Trojan/Generic.ASMalwS.2B9E7F9
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Win32.Trojan.BSE.Z8D92P
TACHYON	Ransom/W32.Encoder.91648
McAfee	Artemis!C38CE8BACAF4
MAX	malware (ai score=83)
Rising	Trojan.Generic@ML.97 (RDML:8lHudzPcrKKE77/4DBPpkw)
Ikarus	Trojan.Win32.Occamy
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Encoder.KIT!tr
Paloalto	generic.ml

How to remove BAT/KillFiles.NPV?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “BAT/KillFiles.NPV”?