Win32.Trojan.KillProc

[gandian]

I had posted some info on this in the XP help area also, when i had problems
with downloading the ebay toolbar, it would not install after several
uninstalls and reinstalls. Previously before that, i went to a site called
bearflix to try to find a movie, (i have never looked here before, so I
downloaded their program and it would not work anyway, from that point i ran
lavasofts Ad-ware SE which showed me Win32.Trojan.KillProc tac rating of 10,
so i then removed it thru ad ware, i logged onto the computer today, and
again tried to download the ebay toolbar,did not work again, ran adware
again, got the same message Win32.Trojan.KillProc, I don't believe the ebay
toolbar is causing this, it was previously installed and disappered after i
had to do a reinstall on windows one care, so i am running a firewall. Is
this a new trojan? I never had a trojan before.......

 

[Leythos]

I had posted some info on this in the XP help area also, when i had problems
with downloading the ebay toolbar, it would not install after several
uninstalls and reinstalls. Previously before that, i went to a site called
bearflix to try to find a movie, (i have never looked here before, so I
downloaded their program and it would not work anyway, from that point i ran
lavasofts Ad-ware SE which showed me Win32.Trojan.KillProc tac rating of 10,
so i then removed it thru ad ware, i logged onto the computer today, and
again tried to download the ebay toolbar,did not work again, ran adware
again, got the same message Win32.Trojan.KillProc, I don't believe the ebay
toolbar is causing this, it was previously installed and disappered after i
had to do a reinstall on windows one care, so i am running a firewall. Is
this a new trojan? I never had a trojan before.......

If you go to places that share movies, software, etc... you're bound to
get malware, it's just a way of life when it comes to pirating things.

AdAware is not a trojan remover, why not use Anti-Virus software to
remove it - that's what AV software is for - run the AV software in
Windows Safe Mode.

--

Leythos
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
(e-mail address removed) (remove 999 for proper email address)

 

[Malke]

I had posted some info on this in the XP help area also, when i had problems
with downloading the ebay toolbar, it would not install after several
uninstalls and reinstalls. Previously before that, i went to a site called
bearflix to try to find a movie, (i have never looked here before, so I
downloaded their program and it would not work anyway, from that point i ran
lavasofts Ad-ware SE which showed me Win32.Trojan.KillProc tac rating of 10,
so i then removed it thru ad ware, i logged onto the computer today, and
again tried to download the ebay toolbar,did not work again, ran adware
again, got the same message Win32.Trojan.KillProc, I don't believe the ebay
toolbar is causing this, it was previously installed and disappered after i
had to do a reinstall on windows one care, so i am running a firewall. Is
this a new trojan? I never had a trojan before.......

You didn't practice "Safe Hex" (see links at the end of this post) and
now your computer is infected.

Go through these general malware removal steps systematically -
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Include scanning with David Lipman's Multi_AV and follow instructions to
do all scans in Safe Mode.

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
http://www.pctipp.ch/downloads/sicherheit/35905/multi_av_scanning_tool.html
- download site

The site is in German but David's tool is in English so don't let that
worry you. Scroll all the way down to almost the bottom of the page and
you'll see a box titled "Infos Zum Download - Multi-AV Scanning Tool".
You'll see "Download von www pctipp.ch" and the live link to download
Multi_AV.

You can also check to see if there are targeted removal steps for your
malware here:
Bleeping Computer removal how-to's -
http://www.bleepingcomputer.com/forums/forum55.html

When all else fails, run HijackThis and post your log in one of the
specialty forums listed at the first link above (not here, please).

Standard caveat: If the procedures look too complex - and there is no
shame in admitting this isn't your cup of tea - take the machine to a
professional computer repair shop (not your local version of
BigComputerStore/GeekSquad). Please be aware that not all local shops
are skilled at removing malware and even if they are, your computer may
be so infested that Windows will need to be clean-installed. Have all
your data backed up before you take the machine into a shop.

Safe Hex:
http://www.wilderssecurity.com/showthread.php?t=27971 - So How Did I Get
Infected Anyway?
http://www.getsafeonline.org/
https://www.mysecurecyberspace.com/
http://www.getnetwise.org/
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://www.claymania.com/safe-hex.html
http://www.aumha.org/a/parasite.htm - The Parasite Fight
http://msmvps.com/blogs/harrywaldron/archive/2006/02/05/82584.aspx - MVP
Harry Waldron - The Family PC - How to stay safe on the Internet
http://www.spywarewarrior.com/rogue_anti-spyware.htm - Eric Howes on
Rogue Antispyware Programs


Malke

 

[David H. Lipman]

From: "gandian" <[email protected]>

| I had posted some info on this in the XP help area also, when i had problems
| with downloading the ebay toolbar, it would not install after several
| uninstalls and reinstalls. Previously before that, i went to a site called
| bearflix to try to find a movie, (i have never looked here before, so I
| downloaded their program and it would not work anyway, from that point i ran
| lavasofts Ad-ware SE which showed me Win32.Trojan.KillProc tac rating of 10,
| so i then removed it thru ad ware, i logged onto the computer today, and
| again tried to download the ebay toolbar,did not work again, ran adware
| again, got the same message Win32.Trojan.KillProc, I don't believe the ebay
| toolbar is causing this, it was previously installed and disappered after i
| had to do a reinstall on windows one care, so i am running a firewall. Is
| this a new trojan? I never had a trojan before.......

KillProc is not a real Trojan but is a 'at risk tool'. That is it ios a utility to kill a
running process. By itself it is not malicious. However it can be packaged and used by a
script in a malicious fashion.

The fully qualified name and path to the EXE file can provide further information.

 

[gandian]

I have the windows one care firewall and anti virus and spyware installed, so
i can't understand how this killproc got into the system, thanks

 

[David H. Lipman]

From: "gandian" <[email protected]>

| I have the windows one care firewall and anti virus and spyware installed, so
| i can't understand how this killproc got into the system, thanks
|

3 possible reasons...

1. It was on the PC prior to MS OneCare

2. New signatures identified this

3. OneCare just plain s--ks !