Toshiro Posted June 9, 2009 Share Posted June 9, 2009 The Russian anti-virus vendor Doctor Web has issued a warning about a new Trojan that can, potentially, delete every single file and folder on a compromised computer.The new Trojan has an appropriate name - Trojan.KillFiles.904 and has been confirmed in the wild since the beginning of this month (June 2009).If you are unfortunate enough to be infected with Trojan.KillFiles.904 then all of your files and data are at serious risk.The Trojan will search all drives on your system, both internal and external, and including small devices such as USB sticks and flash memory cards.Trojan.KillFiles.904 will search for drives in reverse logical order, i.e. it will look for drive Z: first and A: last.Whenever it finds a drive it will attempt to remove all files and folders contained on it, whether they are visible or hidden.Talking of hidden files, if the Trojan cannot delete a file for some reason, such as the fact that it may be currently in use, then it will assign the ‘hidden’ attribute to it, making it inconvenient at best for a user to then find it.The only files and folders that the Trojan will leave untouched are Windows system files which mean that you could actually continue to use your computer as normally whilst being blissfully unaware of what was happening in the background.The KillFiles.904 Trojan is therefore quite unique because it doesn’t attempt to steal personal data or lead to any kind of extortion from the programmer.Instead it is designed with the singular purpose of destroying any system it finds its way onto.If you don’t already know what a Trojan is,check out What exactly is a TrojanSource : TheWindowsClub Link to comment Share on other sites More sharing options...
Rock Lee Posted June 9, 2009 Share Posted June 9, 2009 Nice find Han :evil: ; I usually don't take to well to new viruses & such. I feel like these things can get hyped up just because of what the virus can do & not for the potential that it has to do it. Just like the Conficker, even though it did infect a few, it didn't do it on the scale that basically every media outlet led us on to believe. As fas as KillFiles.904 goes, again I'm not worried about it. With the protection that I have I don't see a real reason to worry. I back up my PC on a remote file server every 2 weeks & I make sure to back up recent & important files, if necessary, on a daily basis. A virus isn't the only thing that can completely erase your computer. I learned that the hard way, which is why I back up my things they way I do now.Nice post indeed, thanks for the heads up.► Rock Lee Link to comment Share on other sites More sharing options...
irefay Posted June 10, 2009 Share Posted June 10, 2009 When you find one that can wipe my ass for me let me know... :evil: Link to comment Share on other sites More sharing options...
nooooooooo Posted June 10, 2009 Share Posted June 10, 2009 I just hope that whoever created this accidentally ends up running his own creation by accident. Link to comment Share on other sites More sharing options...
Zeus_Hunt Posted June 10, 2009 Share Posted June 10, 2009 I believe Antivirus progs should have updated us by now .. considering how nasty it is.If an Antivir does not protect someone from this nasty one then ... time to change Antivir :) Link to comment Share on other sites More sharing options...
jtmulc Posted June 10, 2009 Share Posted June 10, 2009 Not sure of this one yet. On one hand, a quick check at Snopes doesn't reveal anything, but a google search for "Trojan.KillFiles.904" doesn't yield any articles in English that aren't a copy of the one posted here. Not ready to start yelling Shenanigans yet, but I'm keeping an eye out. Link to comment Share on other sites More sharing options...
Toshiro Posted June 10, 2009 Author Share Posted June 10, 2009 Nice find Han :cheers: ; I usually don't take to well to new viruses & such. I feel like these things can get hyped up just because of what the virus can do & not for the potential that it has to do it. Just like the Conficker, even though it did infect a few, it didn't do it on the scale that basically every media outlet led us on to believe. As fas as KillFiles.904 goes, again I'm not worried about it. With the protection that I have I don't see a real reason to worry. I back up my PC on a remote file server every 2 weeks & I make sure to back up recent & important files, if necessary, on a daily basis. A virus isn't the only thing that can completely erase your computer. I learned that the hard way, which is why I back up my things they way I do now.Nice post indeed, thanks for the heads up.► Rock LeeNP :)Agreed, I usually don´t take them serieus to.. But this one was different. Friend of mine had it, and he had Kaspersky IS.. :\Found out his pc got f*cked up like hell. So I thought.. Lemme freak out the Nsane Members ;)But yea.. I don't know how he got it.. But just look out. Infected by this name, take action NOW.. (call 9999-IFOTF*CKED) :dance2: Link to comment Share on other sites More sharing options...
Zeus_Hunt Posted June 10, 2009 Share Posted June 10, 2009 Not sure of this one yet. On one hand, a quick check at Snopes doesn't reveal anything, but a google search for "Trojan.KillFiles.904" doesn't yield any articles in English that aren't a copy of the one posted here. Not ready to start yelling Shenanigans yet, but I'm keeping an eye out.Here is a news article from DrWebhttp://www.google.com/search?hl=en&q=T...mp;oq=&aqi= Top 4 are in English :P Link to comment Share on other sites More sharing options...
Rock Lee Posted June 10, 2009 Share Posted June 10, 2009 NP :PAgreed, I usually don´t take them serieus to.. But this one was different. Friend of mine had it, and he had Kaspersky IS.. :\Found out his pc got f*cked up like hell. So I thought.. Lemme freak out the Nsane Members :lmao:But yea.. I don't know how he got it.. But just look out. Infected by this name, take action NOW.. (call 9999-IFOTF*CKED) :lmao:KIS - Fail. ; I'll be sure to call that number if anything shows up :lmao:--+1 Zeus :lmao: Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.