Skip to main content
Skip to main content
Microsoft Security Intelligence
Cart 0 items in shopping cart
Sign in
Published Jan 17, 2011 | Updated Sep 15, 2017

Trojan:WinNT/KillAV.E

Detected by Microsoft Defender Antivirus

Aliases: Win-Trojan/Rootkit.6280.H (AhnLab) Rootkit.Win32.Agent.bipu (Kaspersky) Rootkit.Agent2!cpMP978OkXs (VirusBuster) Rkit/Agent.bipu (Avira) Trojan.KillProc.KP (BitDefender) Trojan.NtRootKit.9781 (Dr.Web) Win32/KillAV.NKC (ESET) Rootkit.Win32.Agent (Ikarus) RootKit.Win32.Undef.cuo (Rising AV) Mal/Efic-A (Sophos) Hacktool.Rootkit (Symantec)

Summary

Trojan:WinNT/KillAV.E is a kernel mode rootkit, which is used to terminate processes related to antivirus and security software. It may also perform other functions, such as deleting files, overwriting registry entry data, and others.
To detect and remove this threat and other malicious software that may be installed on your computer, run a full-system scan with an appropriate, up-to-date, security solution. The following Microsoft products will detect and remove this threat:
 
 
For more information on antivirus software, see http://www.microsoft.com/windows/antivirus-partners/.
Follow us