Summary

This trojan can terminate processes in Windows. It can be used by malicious programs to terminate tasks of anti-virus and security software.

Additional Details

This trojan can terminate selected or all Windows processes except the following ones:

C:\WINDOWS\COMMAND\START.EXE C:\WINDOWS\SYSTEM\WINOA386.MOD C:\WINDOWS\SYSTEM\SYSTRAY.EXE C:\WINDOWS\TASKMON.EXE C:\WINDOWS\EXPLORER.EXE C:\WINDOWS\SYSTEM\MSTASK.EXE C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\KERNEL32.DLL
This trojan can be used to attack a Windows system. Disinfection solution for this trojan is deleting its file from a hard disk.

Technical Details: Alexey Podrezov, December 3rd, 2003;