W32/Killav.ED Trojan

 Virus Information - W32/Killav.ED Trojan:

W32/Killav.ED is a trojan. The trojan will infect Windows systems.

The trojan will arrive as a dropped file of another malware or may be downloaded from the Internet.

Upon execution, it drops as Save peak.exe, lvcdzwel.exe, bib dent real.exe and SOFT THIRD TEST MESS.exe in the Application Data folder.

It modifies the registry at the following location to ensure its automatic execution at every system startup:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

The worm replace the windows hosts file to prevent access to certain malware sites.

The worm attempts to connect to some remote websites to download malicious files.