Remove KillSec

KillSec Description

KillSec is a trojan that attempts to steal login names, passwords, account details and other confidential information that the victim enters on certain German banking web sites. Gathered data is transferred to a predefined remote host. The spyware can run a hidden FTP server or a proxy. It may also download and run malicious files and block access to popular security-related web resources. KillSec runs on every Windows startup.

Remove KillSec

Stop the following KillSec processes:
smss.exe
winlogon.exe


Remove the following KillSec registry keys:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunMicrosoftWindowsLogonProcess
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunMicrosoftWindowsSessionManagerSubsystem
HKEY_CLASSES_ROOTib1dll6.CBrowserHelper
1E6CE4CD-161B-4847-B8BF-E2EF72299D69
8C691F25-C565-4FB7-8BCC-E85169BD7C47
14A5F3E7-B235-4D98-9264-5C67D2657BC4
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlInitRegKey


Delete the following KillSec files:
smss.exe
winlogon.exe

Other Spyware

0-9

A

B

C

D

E

F

G

H

I

J

K

L

M

N

O

P

Q

R

S

T

U

V

W

X

Y

Z