W32/Killwin.AM Trojan

 Virus Information - W32/Killwin.AM Trojan:

W32/Killwin.AM is a trojan. The trojan will infect Windows systems.

The trojan will arrive as a dropped file of another malware or may be downloaded from the Internet.

Upon execution, the trojan modifies the HOSTS file to prevent users from accessing the following web-sites:

(Blocked)er.com
bancomer.(Blocked)m.mx
www.(Blocked)mer.com
www.(Blocked)mer.com.mx

The trojan also redirects users to any of the following URLs:

(Blocked).(Blocked).19.185
(Blocked).(Blocked).75.66
(Blocked).(Blocked).120.208

It also creates a batch file that deletes itself and its main component after modifying the HOSTS file.