KHATRA.EXE

Khatra.exe (Khatra) Trojan Virus File Information

	Khatra.exe is a dangerous file which creates activities on a user’s computer which may be highly undesirable. This file is unsafe.

Type: Trojan Virus
Location: C:\WINDOWS\system32\khatra.exe
Risk Level: Moderate
IT CAN MAKE UNEXPECTED CHANGES TO UR SYSTEM.
IT CAN DISABLE CONTROL PANEL AND CREATES A FILE IN EACH FOLDER OF UR DRIVE.
THIS FILE MAY BE OF SIZE 600 KB THUS FILLING HALF OF UR HARD DISK.
IT ALSO RUNS IN UR TASK MANAGER AND USES UR MEMORY.
IT SPREADS MAINLY THROUGH PEN DRIVES.

It is recommended that you remove any malicious software such as Khatra.exe from your computer immediately.

The file "khatra.exe" is known to be created under the following filenames:

%AllUsersProfile%\desktop.exe %AllUsersProfile%\favorites.exe %AppData%\microsoft\cd burning\khatra.exe %CommonDesktopDir%\desktop.exe %CommonFavorites%\favorites.exe %DesktopDir%\desktop.exe %System%\khatra.exe %UserProfile%\desktop.exe %Windir%\khatarnakh.exe %Windir%\system\ghost.exe %Windir%\xplorer.exe c:\inetpub.exe c:\inetpub\inetpub.exe c:\inetpub\wwwroot\wwwroot.exe c:\khatra.exe

Notes: %AllUsersProfile% is a variable that specifies the all users' profile folder. By default, this is C:\Documents and Settings\All Users (Windows NT/2000/XP). %AppData% is a variable that refers to the file system directory that serves as a common repository for application-specific data. A typical path is C:\Documents and Settings\[UserName]\Application Data. %CommonDesktopDir% is a variable that refers to the file system directory that contains files and folders that appear on the desktop for all users. A typical path is C:\Documents and Settings\All Users\Desktop (Windows NT/2000/XP). %CommonFavorites% is a variable that refers to the file system directory that serves as a common repository for all users' favorite items. A typical path is C:\Documents and Settings\All Users\Favorites (Windows NT/2000/XP). %DesktopDir% is a variable that refers to the file system directory used to physically store file objects on the desktop. A typical path is C:\Documents and Settings\[UserName]\Desktop. %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP). %UserProfile% is a variable that specifies the current user's profile folder. By default, this is C:\Documents and Settings\[UserName] (Windows NT/2000/XP). %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.

The file "khatra.exe" has the following possible country of origin:

Origin Number of Incidents United Kingdom 63

The following threats are known to be associated with the file "khatra.exe":

Threat Alias	Number of Incidents
Generic.dx [McAfee]	60
Trojan-Dropper.Win32.Autoit.k [Kaspersky Lab]	60
Trojan-Dropper.Win32.Autoit [Ikarus]	42
W32.SillyFDC [Symantec]	21
Virus.Win32.Sality [Ikarus]	15
Trojan Horse [Symantec]	12
W32/Autoit-BP [Sophos]	12
Email-Worm.Win32.Agent.kd [Kaspersky Lab]	9
Trojan:Win32/Malagent [Microsoft]	9
W32.Harakit [Symantec]	9
Mal/Generic-A [Sophos]	6
Email-Worm.Agent!sd6 [PC Tools]	3
Email-Worm.Win32.Runouce.b [Kaspersky Lab]	3
Mal/Inet-Fam [Sophos]	3
PE_Chir.B [Trend Micro]	3
Trojan-Dropper.Autoit!sd6 [PC Tools]	3
Virus.Win32.VB.bb [Ikarus]	3
Virus:Win32/Virut.L [Microsoft]	3
W32/Chir.b@MM [McAfee]	3
W32/Chir-B [Sophos]	3
Win32.Virut.Gen.5 [PC Tools]	3
Win32/ChiHack.6652 [AhnLab]	3

How to remove KHATRA.EXE

KHATRA.EXE removal

KHATRA.EXE and detail of KHATRA.EXE:
KHATRA.EXE description :The filename KHATRA.EXE was last seen on 02.13.2009, and it is considered unsafe. This threat is associated with the malware group Win32.Autoit.BP. Threat name Win32.Autoit.BP Filename [System32Root]\khatra.exe Filesize Unknown Last seen 02.13.2009 Status Known to RemoveIT Pro as unsafe. This file can perform following behavior. - File is created as process on the disk. - This process can create, delete or modify files on the disk.
KHATRA.EXE remove instruction
1. Temporarily Disable System Restore, Reboot computer in SafeMode;
2. Locate KHATRA.EXE virus files and uninstall KHATRA.EXE files program. Follow the screen step-by-step screen instructions to complete uninstallation of KHATRA.EXE.
3. Delete/Modify any values added to the registry related with KHATRA.EXE,Exit registry editor and restart the computer;
4.Clean/delete all KHATRA.EXEinfected file(s):KHATRA.EXE and related,or rename KHATRA.EXE virus files;
5.Please delete all your IE temp files with KHATRA.EXE manually,run a whole scan with antivirus program ;
enable 'show all hidden files..' option in windows explorer view menu and
6.Search all your harddrive files and folders for '*.exe' with size<1mb and delete only '.exe' files having folder symbol(name of the folder). 
THEN FORMAT UR OS DRIVE.USE NOD32 OR AVAST FOR BETTER RESULTS.

Need help for remove KHATRA.EXE? Post you problem on Free Virus Remove Help forum URL:http://help.antiviruses123.com.