Published Mar 31, 2010|Updated Apr 16, 2011


Alert level: Severe Detected with Windows Defender Antivirus

Also detected as: Trojan.Win32.KillAV.fqi (Kaspersky) Win32/Bvatik.A (CA) Win32/Dalixi.A (ESET) Trojan.Win32.Killav (Ikarus) Trojan.Win32.KillAV.csw (Rising AV) Trojan.Win32.Killav (Sunbelt Software) Trojan.Mebratix (Symantec) TROJ_KILLAV.AJF (Trend Micro)

Trojan:Win32/Ghodow.A is a trojan that modifies the hard disk's MBR (Master Boot Record) and unhooks various SSDT entries. It downloads and executes arbitrary files from a remote host.


Latest News
Show/Hide feedback form