TROJ_KILLDISK.C
Trojan.Disakil (Symantec), Trojan.SystemKiller (Malwarebytes), a variant of Win32/KillDisk.NBC (ESET-NOD32)
Windows

Threat Type: Trojan
Destructiveness: No
Encrypted: No
In the wild: Yes
OVERVIEW
Downloaded from the Internet, Dropped by other malware
This malware is related to the recent BlackEnergy targeted attacks that affected industries in Ukraine.
To get a one-glance comprehensive view of the behavior of this Trojan, refer to the Threat Diagram shown below.

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
TECHNICAL DETAILS
90,112 bytes
EXE
Yes
06 Jan 2016
Arrival Details
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
Other Details
This Trojan does the following:
- Wipe Master Boot Record Data
- Destroy the affected system by corrupting critical system files
- Reboot the system
SOLUTION
9.800
12.257.00
07 Jan 2016
NOTES:
Restore the system from backup or reinstalling the operating system.
Did this description help? Tell us how we did.