Kvsc3.exe and Kvsc3.dll virus removal methods

Source: Internet
Author: User

Virus name: Trojan-PSW.Win32.OnLineGames.zl (Kaspersky)

Virus alias: Trojan. PSW. win32.OnlineGames. cql (rising), Trojan. PSW. win32.SunOnline. f [dll] (rising) Win32.Troj. PSWGameT. lk.17408, Win32.Troj. PSWGameT. xk.17408 [dll] (drug overlord)

Virus size: 22,528 bytes

Shelling method:

Sample MD5: 7f14320161a8e7530c719965a6b8adbd

Sample SHA1: a4d7132acbdee2e7765a6d7c34e1559c8cc1ca

Time detected: 2007.6

Last Updated: 2007.6.27

Associated Virus:

Transmission methods: malicious webpage and other virus downloads

Technical Analysis

After the trojan is run, copy itself to the system directory:

%Windows#kvsc3.exe

Release dll injection process:

% System % Kvsc3.dll

(Note: If Kvsc3.dll already exists, the dll released by the trojan uses a random letter as the file name, such as olnryh. dll and ojprzc. dll)

Startup items created for Trojans:


[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]
"Kvsc3" = "%windows?kvsc3.exe"

Clear steps

1. Delete the trojan startup Item:


[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]
"Kvsc3" = "%windows?kvsc3.exe"

2. restart the computer

3. Delete the trojan file:


%Windows#kvsc3.exe
% System % Kvsc3.dll

Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.