How to Remove Trojan Kill.AV

Kill.AV is a virus from the Trojan family. These programs secretly install themselves in the system and can be remotely controlled by the attacker. This specific Trojan might transmit spam emails through your email account and is capable of shutting down many anti-virus and anti-spyware applications. It also includes a key logger, and is capable of capturing user names, passwords, bank account and credit card numbers.

Instructions

How to Remove Trojan Kill.AV

1. 

   Click "Start," "Control Panel" and "Add and Remove Programs." Click on "Trojan.Kill.AV" and click "Remove."

2. 

   Search the computer for the Kill.AV Trojan files by clicking "Start," "Search" and "All Files Or Folders." Search for the following files and delete each one. Write down the location of the folder containing the files as you will need this information later: "KillAV.dll," "winered.sys," "System_File.exe," "WINLOGON¨.exe," "W1N32.DLL" and "killer.exe."

3. 

   Unregister the Kill.AV ".dll" files by clicking "Start" and "Run," then type "cmd," then click the "OK" button. Type the exact directory path from Step 2, "regsvr32 /u" and "[DLL_NAME]." Press the "Enter" button. A message will pop up that says you successfully unregistered the file.

4. 

   Remove the viral process using Windows Task Manager by pressing the "Ctrl," "Alt" and "Del" buttons. Look for the "Kill.AV Trojan" processes under "Image Name." Highlight the following viral process and click "End Process:" "System_File.exe," "WINLOGON¨.exe" and "killer.exe."

Tips & Warnings

• This manual removal process might be difficult, and you run the risk of destroying computer files. It is recommended you back up your system and registry.

References

• Sophos Virus Information