| | |
Trojan.KillAV removal tool needed
![]() |
•
•
Join Date: Mar 2005
Posts: 10
Reputation:
Solved Threads: 0
Hello. I somehow received the Trojan.KillAV virus and need to get it removed. I tried going to Symantec for their removal tool, however the nature of the virus redirects my browser to other sites preventing me from getting the removal tool. It has also removed my administrative privledges, so I am struggling to add/remove programs. Does anyone have the removal tool in a state that I can download it directly from the thread to get rid of it? Thanks in advance for any help you can provide. Have a great day!
•
•
Join Date: May 2005
Posts: 3,204
Reputation:
Solved Threads: 188
I don't have the removal tool but you can probably get it yourself and run it... the trojan has very likely set values in your hosts file which are blocking you from some anti-malware sites. Solution is to remove those entries, ie. reset your hosts file.
You can do this manually or with this tool:
==download HostsXpert from http://www.funkytoad.com/content/view/13/31/
-click Restore MS Hosts File button.
Some security applications, possibly also various malware, will lock your Hosts file [as a protection]. If HostsXpert is unable to restore your file check for applications which may have incidentally locked it. Lock/Unlock hosts exists in Zonealarm and Spybot S&D.
ZoneAlarm : look under firewall, advanced;
Spybot : click Tools, Hosts File, uncheck "Lock Hosts file read-only as protection against hijackers"
Or just...[ but a Spybot setting may over-ride this command....] do this:
Go Start, run, type cmd -press Enter. Paste this line into the window at the prompt, press Enter, close the window and try the Restore button again.
attrib -r -h -s %SystemRoot%\system32\drivers\etc\HOSTS
Manually: the hosts file is at C:\windows\system32\drivers\etc\hosts. Run the command above then drag the hosts file onto a notepad to open it. Delete all extra entries so that your file has only this entry :
127.0.0.1 localhost
Save it, then try the removal tool URL again.
You can do this manually or with this tool:
==download HostsXpert from http://www.funkytoad.com/content/view/13/31/
-click Restore MS Hosts File button.
Some security applications, possibly also various malware, will lock your Hosts file [as a protection]. If HostsXpert is unable to restore your file check for applications which may have incidentally locked it. Lock/Unlock hosts exists in Zonealarm and Spybot S&D.
ZoneAlarm : look under firewall, advanced;
Spybot : click Tools, Hosts File, uncheck "Lock Hosts file read-only as protection against hijackers"
Or just...[ but a Spybot setting may over-ride this command....] do this:
Go Start, run, type cmd -press Enter. Paste this line into the window at the prompt, press Enter, close the window and try the Restore button again.
attrib -r -h -s %SystemRoot%\system32\drivers\etc\HOSTS
Manually: the hosts file is at C:\windows\system32\drivers\etc\hosts. Run the command above then drag the hosts file onto a notepad to open it. Delete all extra entries so that your file has only this entry :
127.0.0.1 localhost
Save it, then try the removal tool URL again.
Deep, deep in the woods, but walking about.
•
•
Join Date: Dec 2007
Posts: 2
Reputation:
Solved Threads: 0
Hi.
If you have "Your browser was hijacked by Trojan.KillAV" or something like "Your browser was hijacked by Trojan.KillAV"
This infection is arrived via bad CODEC installs aka Zlob. You can read this:
How to use SmitFraudFix
Regards,
John.
If you have "Your browser was hijacked by Trojan.KillAV" or something like "Your browser was hijacked by Trojan.KillAV"
This infection is arrived via bad CODEC installs aka Zlob. You can read this:
How to use SmitFraudFix
Regards,
John.
![]() |
Similar Threads
- hijackthis log... what to delete?? (Viruses, Spyware and other Nasties)
- Supplemental and old 404 pages( google automated removal tool) (Search Engine Optimization)
- Vondo/Virtumonde Cleanup after removal tool (Viruses, Spyware and other Nasties)
- Hijackthis log RE: Trojan.Abwiz.F virus (Viruses, Spyware and other Nasties)
- Internet Explorer & Windows Explorer (desktop shortcuts) Won't Load! (Viruses, Spyware and other Nasties)
- Aurora Help Needed (Viruses, Spyware and other Nasties)
- pop up problems (Web Browsers)
- Hijack This Log (Viruses, Spyware and other Nasties)
Other Threads in the Viruses, Spyware and other Nasties Forum
- Previous Thread: TODO: <Product Name>,
- Next Thread: How likely is it to be hijacked?
| Thread Tools | Search this Thread |
adware anti-malware anti-virussitesaccessissue antivirus apple audio avg bar blackhat botnet botnets censorship commercial commercials conficker connect crosssitescripting cyber cybercrime cyberwarfare ddos domains e-mafia education email europe exam exploit facebook fake fancheckvirus gaming gtaiv gumblar halloween herss.exe hijack hosting internet iphone kaspersky legal logfiles mail malware mcafee mega-d messagelabs microsoft mobile msn nazi news obama onlinethreats paedophile panel parents patch phishing police policeprovirusmba-mblockedinternetaccess president privacy pro problem redirecting reliability report research risk samhain sans scareware school search security sites software spam spyware spywareexternalwindows7adminstratortrojans sqlinjection symantec system teen translate trojan unabletoaccessanti-virussites unwanted usa virus viruses vista war warning windows worm yahoo zeroday






