Categories: Trojan

Trojan.Win32.KillAV.wns removal

The Trojan.Win32.KillAV.wns is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.KillAV.wns virus can do?

Drops a binary and executes it
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Attempts to disable UAC
Attempts to modify UAC prompt behavior
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan.Win32.KillAV.wns?


File Info:
name: E00C1097D444298D015B.mlwpath: /opt/CAPEv2/storage/binaries/23bfbc6da6efae1735fad740f0380a01ff448830c3addedb4a4d70761b4f7383crc32: 533791A1md5: e00c1097d444298d015bb1983383df1bsha1: 58ab174e1e58494f4e459050e588f31498171349sha256: 23bfbc6da6efae1735fad740f0380a01ff448830c3addedb4a4d70761b4f7383sha512: 5cc229280df6b7f9ad14a4a7f1ffad7dbeb147d3f098220fff7f4c1514ae3c23e68909cb1cb31543fc9f25daf268e34c64fec0ad40f6689cf349a6c4c76b5a43ssdeep: 6144:ATwZo1IV3puaibGKFHi0mofhaH05kipzc16580bHFbl86JQPDHDdx/QtqR:OXgvmzFHi0mo5aH0qMzV5807FRPJQPDVtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T11264B03BB780C8F2C485803176996E136EF56C301625EA5BDB60DE0A2EF55E4D72A34Fsha3_384: 9e6fd14d64e2cab84cbc23df577c47eb6f4cbcd6f95888982c5f6ed187e4222b0027d90ad5991251a1b3aca9b18ad51dep_bytes: 6a6068f8b74200e8edf7ffffbf940000timestamp: 2009-12-30 07:25:31
Version Info:
0: [No Data]

Trojan.Win32.KillAV.wns also known as:

Bkav	W32.RontokbroLH.Worm
Lionic	Trojan.Win32.Blocker.tnDI
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Pykspa.1
FireEye	Generic.mg.e00c1097d444298d
CAT-QuickHeal	Worm.Pykspa.C3
ALYac	Gen:Variant.Pykspa.1
Cylance	unsafe
Zillya	Trojan.Blocker.Win32.28137
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Trojan ( 003da8d71 )
BitDefender	Gen:Variant.Pykspa.1
K7GW	Trojan ( 003da8d71 )
Cybereason	malicious.7d4442
BitDefenderTheta	Gen:NN.ZexaF.36250.umW@aGa3aac
VirIT	Backdoor.Win32.Zepfod.A
Cyren	W32/Pykspa.A.gen!Eldorado
Symantec	W32.Pykspa.D
ESET-NOD32	Win32/AutoRun.Agent.TG
APEX	Malicious
ClamAV	Win.Worm.Autorun-437
Kaspersky	HEUR:Worm.Win32.Agent.gen
Alibaba	Malware:Win32/km_28a2.None
NANO-Antivirus	Trojan.Win32.AntiAV.dsnxsg
ViRobot	Trojan.Win32.AntiAV.Gen.A
Avast	Win32:Renos-KY [Trj]
Tencent	Worm.Win32.Yah.za
Sophos	W32/Pykse-H
Baidu	Win32.Worm.Autorun.o
F-Secure	Trojan.TR/BAS.Samca.fszgx
DrWeb	Trojan.Kypes.2
VIPRE	Gen:Variant.Pykspa.1
TrendMicro	TROJ_VILSEL.SMO
McAfee-GW-Edition	BehavesLike.Win32.Pykse.fc
Trapmine	malicious.high.ml.score
Emsisoft	Gen:Variant.Pykspa.1 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan/Vilsel.cgx
Webroot	Worm:Win32/Pykspa.C
Google	Detected
Avira	TR/BAS.Samca.fszgx
MAX	malware (ai score=81)
Antiy-AVL	Trojan/Win32.AntiAV
Microsoft	Trojan:Win32/Dinwod.A!MTB
Xcitium	Worm.Win32.Autorun.Agent_TG0@1isiwy
Arcabit	Trojan.Pykspa.1
SUPERAntiSpyware	Trojan.Agent/Gen-SpamBot
ZoneAlarm	HEUR:Worm.Win32.Agent.gen
GData	Win32.Trojan.BSE.1JWSKP9
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Zepfod.R397
McAfee	W32/Pykse.worm.c
TACHYON	Trojan/W32.Vilsel.327680.G
VBA32	Trojan.Win32.KillAV.wns
Malwarebytes	Generic.Worm.AutoRun.DDS
Panda	W32/SpySkype.E
Zoner	Trojan.Win32.24407
TrendMicro-HouseCall	TROJ_VILSEL.SMO
Rising	Worm.Autorun!1.BC87 (CLASSIC)
Yandex	Trojan.GenAsa!qHVVdB/AORM
Ikarus	Trojan.Agent
MaxSecure	Backdoor.Zepfod.A
Fortinet	W32/AutoRun.AGENT.AUA!tr
AVG	Win32:Renos-KY [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)