W32/KillAv-EO

Aliases Trojan.Win32.KillAV.jr

Category Viruses and Spyware

Type Worm

W32/KillAv-EO is a worm for the Windows platform.

The following registry entry is created to run W32/KillAv-EO on startup:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Svcs: Dnscache
<pathname of the worm executable>

The following registry entry is set:

HKCU\Software\Microsoft\Internet Explorer\InformationBar
FirstTime
0

http://www.sophos.com/security/analyses/viruses-and-spyware/w32killaveo.html?_log_from=rss