Associated Malware Groups
The filename is associated with the malware groups:
- Cloaked Malware
- Fraudulent Security Program
File Behavior
BITKV0.DLL has been seen to perform the following behavior:
- The Process is packed and/or encrypted using a software packing process
- Found on infected systems and resists interrogation by security products
BITKV0.DLL has been the subject of the following behavior:
- Created as a process on disk
- Deleted as a process from disk
- The process is hooked into all running processes which could allow it to take control of the system or record keyboard input, mouse activity and screen contents
- Registered as a Dynamic Link Library File
- Enabled as an In Process Object/Server - Common with DLL Injections
Country Of Origin
The filename BITKV0.DLL was first seen on Sep 11 2008 in the following geographical regions of the Prevx community:
- The UNITED KINGDOM on Sep 11 2008
- PHILIPPINES on Sep 11 2008
- The EUROPEAN UNION on Sep 12 2008
- SPAIN on Sep 27 2008
- HONG KONG on Sep 27 2008
- BRAZIL on Oct 2 2008
- URUGUAY on Oct 2 2008
- INDIA on Oct 4 2008
- LEBANON on Oct 4 2008
- VIET NAM on Oct 11 2008
File Name Aliases
BITKV0.DLL can also use the following file names:
- BITKV1.DLL
- 17112673.DAT
- JYTMFFN.TMP
- 72980859.SVD
- 04517769.DAT
- 37147769.DLL
- 77330179.DAT
- BITKV4.DLL
- BITKV2.DLL
- 15328563.SVD
- 58343453.DLL
- 61696356.DLL
- 61748852.DLL
- 34803179.DLL
Filesizes
The following file size has been seen:
- 69,632 bytes
- 70,144 bytes
- 235,012,140 bytes
File Type
The filename BITKV0.DLL is used by multiple object types including Dynamic Link LIbraries,objects.
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.