BlackKiLLeR 1.1
(VirTool.Win32.VB.s)
(Trojan.Win32.VB.qh)

by TiGeR756

Written in Visual Basic


BlackKiller is able to kill the following programs:
Anti Virus Software:
--------------------
Agnitum Trojan Scanner
Anti Trojan Watch
AntiVir 9x
Anti-Viral Toolkit Pro (AVP)
AntiVirusKit 2004
AVAST
AVAST32 Anti Virus
AVG Anti Virus
AVPersonal
Bit Defender Professional
Bull Guard
Dr. Solomon Virus Scan
Dr. Solomon Virus Scan
E-Scan
E-Trust Anti Virus
EZ Anti Virus
Fix-it
F-PROT
F-Secure Anti Virus
G-Data AntiVirenKit
H+BDEV Anti Virus
InoculateIT Personal Edition
Iris Anti Virus
Kaspersky Anti Virus
McAfee Anti Virus
Module for Computer Associates VET Anti Virus
Moosoft's Trojan Cleaner
NOD32 Anti Virus
Norman Anti Virus
Norton Anti Virus 2003
Norton Anti Virus 2004
Norton Anti Virus 2005
Norton Anti Virus Corporate Edition
OfficeScanNT
Panda Anti Virus
PC-Cillin
RAV Anti Virus
Sophos Anti Virus
TDS-3 Trojan Defense Suite
Trojan First Aid Kit 5
Trojan Hunter
VET Anti Virus
Virus Buster

Firewalls:
----------
Bit Defender Professional
Blackice
E-Trust's Email Firewall Desktop Shield
EZ-Trust - E-Trust Firewall
F-Secure Firewall
Hacker Eliminator
Kaspersky Anti Hacker
Kerio Personal Firewall
McAfee Personal Firewall
Neowatch
Netutils Firewall
Norman Firewall
Norton Personal Firewall 2004
Norton Personal Firewall 2005
Outpost Pro's Firewall
Personal Firewall
PrivateFirewall Version 3.0
Sygate Personal Firewall
Tinyfirewall
Tinypersonal Firewall
WinROUTE Firewall
Zonealarm Firewall
ZoneAlarm Pro Firewall

Miscellaneous Programs:
-----------------------
Hewlett Packard OS Backup Tool
LAN Administrator Scan Tool
McAfee Privacy Service
Network Administrator Remote Administrator Tool
Norton Disk Doctor
Norton Protected Recycle Bin
Outlook Express Updater
PC Body Guard
Process Monitor
Program Auditor
PVIEW
Registry Cleaner
Roxio's GoBack Utility
SPYXX


Killer.exe:
dropped file:
c:\WINDOWS\Service32.exe
size: 45,168 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Service32"
data: C:\WINDOWS\Service32.exe 


tested on Windows XP
June 17, 2006

MegaSecurity