VirusBAT/KillWin.DF!tr
Analysis
BAT/KillWin.DF!tr is classified as a Trojan.
Trojan has the capabilities to remote access connection handling, perform Denial of Service (DoS) or Distributed DoS (DDoS), capture keyboard inputs, delete file or object, or terminate process.
The Fortinet Anti-Virus Analyst Team is currently in the process of creating a detailed description for this virus.
Recommended Action
- FortiGate Systems
- Check the main screen using the web interface for your FortiGate unit to ensure that the latest AV/NIDS database has been downloaded and installed on your system - if required, enable the "Allow Push Update" option.
FortiClient Systems
- Quarantine/delete files that are detected and replace infected files with clean backup copies.
Telemetry
Detection Availability
| FortiClient | |
|---|---|
| Extreme | |
| FortiMail | |
| Extreme | |
| FortiSandbox | |
| Extreme | |
| FortiWeb | |
| Extreme | |
| Web Application Firewall | |
| Extreme | |
| FortiIsolator | |
| Extreme | |
| FortiDeceptor | |
| Extreme | |
| FortiEDR |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2021-11-30 | 89.07343 | |
| 2021-09-17 | 89.01580 | |
| 2020-09-15 | 80.39200 | Sig Updated |
| 2020-09-08 | 80.22400 | Sig Updated |
| 2020-07-14 | 78.87200 | Sig Updated |
| 2020-07-12 | 78.83200 | Sig Updated |
| 2020-07-12 | 78.82700 | Sig Updated |
| 2020-07-10 | 78.79100 | Sig Updated |
| 2020-06-30 | 78.54400 | Sig Added |
| 2018-11-27 | 64.48600 | Sig Updated |