About Site Map Submit Contact Us Log in | Create an account
Create an account Log In
Average Rating
User Rating:
Visitors Rating:
My rating:

Write review
  • Last update: 6 years ago
  • Total downloads: 492
  • Operating system: WinXP, Win2003, Win2000, Win Vista, Windows 7
  • Publisher: Kaspersky (23 other programs)
See full specifications

windows default iconKatesKiller Publisher's description

use the utility KatesKiller.exe in order to remove malware belonging to the family Trojan-PSW.Win32.Kates.

A trojan is a term used to describe a type of malware designed to harm computer systems. Trojans are not self-replicating. Some trojans are capable of autonomous penetration through computer protection systems aiming to invade and infect the system. Usually trojans penetrate a system along with a virus or a worm in the result of careless behavior of the user or through an active attack attempt.

Trojan password stealers (Trojan-PSW) are trojans designed to steal passwords and other confidential data without using keystroke logging. Such trojans have means to extract passwords from the files used by applications to store them.

To disinfect a system compromised with malware belonging to the family Trojan-PSW.Win32.Kates (also known as W32/Daonol) use Kaspersky Anti-Virus installed on the PC. If you do not have Kaspersky Anti-Virus installed, we recommend to install a Kaspersky Lab application or use the utility KatesKiller.exe in order to remove malware belonging to the family Trojan-PSW.Win32.Kates.

Disinfection of an infected system

* Download the archive KatesKiller.zip and extract it into a folder on the infected (or potentially infected) PC using an archiver program (for example, WinZip).
* Run the KatesKiller.exe file.
* Wait for the scan and disinfection to finish. No reboot is needed after disinfection.

Optional parameters to run the utility from command line

-l <file_name> - write log to the file.
-v – detailed logging (must be used in combination with the parameter -l)
-s – scan in “silent” mode (without opening console box).
-y – when the utility finishes, its window will be closed

Signs of Trojan-PSW.Win32.Kates infection

* Antivirus software detects an infected file with random name and extension. When deleted, such file immediately restores (it does not refer to Kaspersky Lab applications. Kaspersky Anti-Virus has a special disinfection procedure).

* explorer.exe terminates at an attempt to start any of the following applications:
o Registry editor (regedit.exe);
o Command line (cmd.exe);
o Total Commander.
* Files with the following extensions cannot be started:
o .bat;
o .reg.
* The following functions are hooked in almost all processes:
o CreateProcessW;
o WSARecv;
o WSASend;
o send;
o connect;
o recv.

System Requirements:

No special requirements.
Program Release Status:
Program Install Support: Install and Uninstall

Is KatesKiller your software?

Manage your software

Most Popular

windows default icon Hotspot Shield 3.20
Hotspot Shield : ensure you are private, secure, and anonymous online!
McAfee SuperDAT Update 7354 icon McAfee SuperDAT Update 7354
McAfee virus pattern and engine updates.
Avira Antivir Virus Definition File Update 19-02-2014 icon Avira Antivir Virus Definition File Update 19-02-2014
A comprehensive, easy to use antivirus program, designed to offer reliable virus protection to home-users only... Read more
windows default icon Hack password 1.0.1
Hides the windows password character. Finally you can see what you type.
windows default icon Quick Heal AntiVirus 2012
Quick Heal AntiVirus 2010, with its intuitive and easy-to-use interface

Related Category

» Access Control (455)
» Firewalls (60)
» Other (1171)