Khatra.exe (Khatra) Trojan Virus File Information

Danger Khatra.exe is a dangerous file which creates activities on a user’s computer which may be highly undesirable. This file is unsafe.

Type: Trojan Virus (Click Here To Learn More)
Location: C:\WINDOWS\system32\khatra.exe (Click Here To Learn How To Locate)
Risk Level: Moderate (Learn More About Risk Levels)

It is recommended that you remove any malicious software such as Khatra.exe from your computer immediately. Below is our recommended removal tool for Khatra.exe . The removal tool has been rated 5 cows out of 5 by Tucows and was previously CNET’s Editor’s Choice. Feel free to download it below.

download

Manual Removal – Khatra.exe may be removed through analyzing your HijackThis log. Feel free to post your hijackthis log below if you need assistance analyzing it. Hijackthis will be ideal to manually remove the virus

Click Here To Learn About HijackThis. To download HijackThis, please click HERE.

Khatra.exe File Details -
File Type – EXE – Khatra.exe is a executable file
First Identified – Mar 20 2024

We recommend that you follow our safety tips so that you can keep your computer clean. Please click here to view our safety tips

Please post comments below. Your comments are both useful to visitors and to us.

Tags:

This entry was posted on Friday, March 20th, 2024 at 8:14 pm and is filed under Suspicious File. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

10 Responses to “Khatra.exe (Khatra) Trojan Virus File Information”

rupesh March 25th, 2024 at 7:14 pm

I have a problem with the khatra.exe virus. I need the tool.

suresh April 9th, 2023 at 8:52 am

Just copy the below tag
and paste it in the notepad and save
as bat file in the desktop.
then run the bat file. then restart the computer. the khatra.exe virus will be cleaned
I have attached 3 tags, save 3 bat files individualy and run respectively.
if cleaned mail me. thank you

1 tag
—————–
@echo off
if not %0==MS-VirusFixer.cmd ren %0 MS-VirusFixer.cmd
cls
Title MS-Dos Virus Remover … Suresh …
mode 50,20
color e
echo.
echo.
echo ##################################################
echo Welcome To MS-Dos Virus Remover
echo This Program Had Written To Remove (Autorun) Virus
echo You Cannot remove this virus by installing
echo New system copy.
echo.
echo Just Use This Program To Remove It
echo.
echo ##################################################
echo.
echo Now Start To Fix Your System
echo.
echo.
pause
taskkill /f /im temp1.exe
if exist %systemroot%\system32\svohost.exe taskkill /f /im svohost.exe&attrib -a -s -r -h %systemroot%\system32\svohost.exe&del /f /q %systemroot%\system32\svohost.exe
if exist c:\autorun.inf attrib -a -s -r -h c:\autorun.inf&del c:\autorun.inf
if exist d:\autorun.inf attrib -a -s -r -h d:\autorun.inf&del d:\autorun.inf
if exist e:\autorun.inf attrib -a -s -r -h e:\autorun.inf&del e:\autorun.inf
if exist f:\autorun.inf attrib -a -s -r -h f:\autorun.inf&del f:\autorun.inf
if exist g:\autorun.inf attrib -a -s -r -h g:\autorun.inf&del g:\autorun.inf
if exist h:\autorun.inf attrib -a -s -r -h h:\autorun.inf&del h:\autorun.inf
if exist i:\autorun.inf attrib -a -s -r -h i:\autorun.inf&del i:\autorun.inf
if exist j:\autorun.inf attrib -a -s -r -h j:\autorun.inf&del j:\autorun.inf
if exist k:\autorun.inf attrib -a -s -r -h k:\autorun.inf&del k:\autorun.inf
if exist l:\autorun.inf attrib -a -s -r -h l:\autorun.inf&del l:\autorun.inf
if exist m:\autorun.inf attrib -a -s -r -h m:\autorun.inf&del m:\autorun.inf
if exist n:\autorun.inf attrib -a -s -r -h n:\autorun.inf&del n:\autorun.inf
if exist o:\autorun.inf attrib -a -s -r -h o:\autorun.inf&del o:\autorun.inf
if exist p:\autorun.inf attrib -a -s -r -h p:\autorun.inf&del p:\autorun.inf
if exist q:\autorun.inf attrib -a -s -r -h q:\autorun.inf&del q:\autorun.inf
if exist r:\autorun.inf attrib -a -s -r -h r:\autorun.inf&del r:\autorun.inf
if exist s:\autorun.inf attrib -a -s -r -h s:\autorun.inf&del s:\autorun.inf
if exist t:\autorun.inf attrib -a -s -r -h t:\autorun.inf&del t:\autorun.inf
if exist u:\autorun.inf attrib -a -s -r -h u:\autorun.inf&del u:\autorun.inf
if exist v:\autorun.inf attrib -a -s -r -h v:\autorun.inf&del v:\autorun.inf
if exist w:\autorun.inf attrib -a -s -r -h w:\autorun.inf&del w:\autorun.inf
if exist x:\autorun.inf attrib -a -s -r -h x:\autorun.inf&del x:\autorun.inf
if exist y:\autorun.inf attrib -a -s -r -h y:\autorun.inf&del y:\autorun.inf
if exist z:\autorun.inf attrib -a -s -r -h z:\autorun.inf&del z:\autorun.inf
taskkill /f /im explorer.exe
cls
echo ##################################################
color e
echo.
echo Operation Succeed ..
echo.
echo Your System Had Fixed Successfully ..
echo.
echo.
echo.
echo Suresh
echo.
echo
echo [email protected]
echo.
echo ##################################################
echo.
echo.
echo Now Press Any Key To Run Explorer Bar
echo.
pause
cls
echo.
echo.
echo.
echo.
echo Mail to : [email protected]
echo.
echo.
echo.
explorer.exe
exit
—————–
2nd tag
@echo off
if not %0==MS-VirusFixer.cmd ren %0 MS-VirusFixer.cmd
cls
Title MS-Dos Virus Remover … Suresh …
mode 50,20
color e
echo.
echo.
echo ##################################################
echo Welcome To MS-Dos Virus Remover
echo This Program Had Written To Remove (Autorun) Virus
echo You Cannot remove this virus by installing
echo New system copy.
echo.
echo Just Use This Program To Remove It
echo.
echo ##################################################
echo.
echo Now Start To Fix Your System
echo.
echo.
pause
taskkill /f /im temp1.exe
if exist %systemroot%\system32\svohost.exe taskkill /f /im svohost.exe&attrib -a -s -r -h %systemroot%\system32\svohost.exe&del /f /q %systemroot%\system32\svohost.exe
if exist c:\khr attrib -a -s -r -h c:\khr&del c:\khr
if exist d:\khr attrib -a -s -r -h d:\khr&del d:\khr
if exist e:\khr attrib -a -s -r -h e:\khr&del e:\khr
if exist f:\khr attrib -a -s -r -h f:\khr&del f:\khr
if exist g:\khr attrib -a -s -r -h g:\khr&del g:\khr
if exist h:\khr attrib -a -s -r -h h:\khr&del h:\khr
if exist i:\khr attrib -a -s -r -h i:\khr&del i:\khr
if exist j:\khr attrib -a -s -r -h j:\khr&del j:\khr
if exist k:\khr attrib -a -s -r -h k:\khr&del k:\khr
if exist l:\khr attrib -a -s -r -h l:\khr&del l:\khr
if exist m:\khr attrib -a -s -r -h m:\khr&del m:\khr
if exist n:\khr attrib -a -s -r -h n:\khr&del n:\khr
if exist o:\khr attrib -a -s -r -h o:\khr&del o:\khr
if exist p:\khr attrib -a -s -r -h p:\khr&del p:\khr
if exist q:\khr attrib -a -s -r -h q:\khr&del q:\khr
if exist r:\khr attrib -a -s -r -h r:\khr&del r:\khr
if exist s:\khr attrib -a -s -r -h s:\khr&del s:\khr
if exist t:\khr attrib -a -s -r -h t:\khr&del t:\khr
if exist u:\khr attrib -a -s -r -h u:\khr&del u:\khr
if exist v:\khr attrib -a -s -r -h v:\khr&del v:\khr
if exist w:\khr attrib -a -s -r -h w:\khr&del w:\khr
if exist x:\khr attrib -a -s -r -h x:\khr&del x:\khr
if exist y:\khr attrib -a -s -r -h y:\khr&del y:\khr
if exist z:\khr attrib -a -s -r -h z:\khr&del z:\khr
taskkill /f /im explorer.exe
cls
echo ##################################################
color e
echo.
echo Operation Succeed ..
echo.
echo Your System Had Fixed Successfully ..
echo.
echo.
echo.
echo Suresh
echo.
echo
echo [email protected]
echo.
echo ##################################################
echo.
echo.
echo Now Press Any Key To Run Explorer Bar
echo.
pause
cls
echo.
echo.
echo.
echo.
echo mail to : [email protected]
echo.
echo.
echo.
explorer.exe
exit
————-
3rd tag
@echo off
if not %0==MS-VirusFixer.cmd ren %0 MS-VirusFixer.cmd
cls
Title MS-Dos Virus Remover … Suresh …
mode 50,20
color e
echo.
echo.
echo ##################################################
echo Welcome To MS-Dos Virus Remover
echo This Program Had Written To Remove (Autorun) Virus
echo You Cannot remove this virus by installing
echo New system copy.
echo.
echo Just Use This Program To Remove It
echo.
echo ##################################################
echo.
echo Now Start To Fix Your System
echo.
echo.
pause
taskkill /f /im temp1.exe
if exist %systemroot%\system32\svohost.exe taskkill /f /im svohost.exe&attrib -a -s -r -h %systemroot%\system32\svohost.exe&del /f /q %systemroot%\system32\svohost.exe
if exist c:\khs attrib -a -s -r -h c:\khs&del c:\khs
if exist d:\khs attrib -a -s -r -h d:\khs&del d:\khs
if exist e:\khs attrib -a -s -r -h e:\khs&del e:\khs
if exist f:\khs attrib -a -s -r -h f:\khs&del f:\khs
if exist g:\khs attrib -a -s -r -h g:\khs&del g:\khs
if exist h:\khs attrib -a -s -r -h h:\khs&del h:\khs
if exist i:\khs attrib -a -s -r -h i:\khs&del i:\khs
if exist j:\khs attrib -a -s -r -h j:\khs&del j:\khs
if exist k:\khs attrib -a -s -r -h k:\khs&del k:\khs
if exist l:\khs attrib -a -s -r -h l:\khs&del l:\khs
if exist m:\khs attrib -a -s -r -h m:\khs&del m:\khs
if exist n:\khs attrib -a -s -r -h n:\khs&del n:\khs
if exist o:\khs attrib -a -s -r -h o:\khs&del o:\khs
if exist p:\khs attrib -a -s -r -h p:\khs&del p:\khs
if exist q:\khs attrib -a -s -r -h q:\khs&del q:\khs
if exist r:\khs attrib -a -s -r -h r:\khs&del r:\khs
if exist s:\khs attrib -a -s -r -h s:\khs&del s:\khs
if exist t:\khs attrib -a -s -r -h t:\khs&del t:\khs
if exist u:\khs attrib -a -s -r -h u:\khs&del u:\khs
if exist v:\khs attrib -a -s -r -h v:\khs&del v:\khs
if exist w:\khs attrib -a -s -r -h w:\khs&del w:\khs
if exist x:\khs attrib -a -s -r -h x:\khs&del x:\khs
if exist y:\khs attrib -a -s -r -h y:\khs&del y:\khs
if exist z:\khs attrib -a -s -r -h z:\khs&del z:\khs
taskkill /f /im explorer.exe
cls
echo ##################################################
color e
echo.
echo Operation Succeed ..
echo.
echo Your System Had Fixed Successfully ..
echo.
echo.
echo.
echo suresh
echo.
echo
echo [email protected]
echo.
echo ##################################################
echo.
echo.
echo Now Press Any Key To Run Explorer Bar
echo.
pause
cls
echo.
echo.
echo.
echo.
echo mail to : [email protected]
echo.
echo.
echo.
explorer.exe
exit

sanjay April 15th, 2023 at 2:13 pm

after using the bat file and removing virus it keeps coming back what should i do

siddu May 21st, 2023 at 5:36 am

khatra.exe virus attack all system in my college.
we virus remove tool.

murdoc August 6th, 2023 at 10:14 pm

hi ,
My friend got her pc over as her pc was infected by the following files khatra.exe and xplorer.exe. This virus tends to replicate itself all over your computer and creates executables in the form of folders similar to the ones on your drive only difference is that the folder is an application file or an executable file . It’s a smart virus, starts by disabling your Regedit, msconfig and in some cases control panel as well as your folder options. After searching through several blogs and forums from which i couldn’t get much information as how to re-enable msconfig and regedit even after using an application called RRt.exe. Keep in mind the following things and it should clean your system out. The file always gets loaded into your startup because you don’t have access to msconfig to disable it in the start up.

Don’t’s
1. Do not connect any thumb drive as you will just spread it on other storage media of yours.
2. When you burn a CD or DVD the file automatically copies its self on the disc and the virus just spreads
3. Tries to hack your outlook and attach itself to your mails.

Clean-up Process

1.After several hit and trials of trying to install Avast (which i googled and apparently does the job), the virus just wouldn’t allow me to install it and kept killing the setup process. The avast professional has a 60 trial, i suggest you use that.
2. I tried to get into safe mode and the virus managed to find its way in there as well and would kill the setup before i could install.
3. finally i burnt a cd from my friends computer(which wasn’t infected of course) of the setup of avast.
4. when you computer boots press F8 and instead of selecting “Safe Mode”, select “Safe Mode with command prompt”. I was surprised to find that the virus didn’t load into the startup.
5. You will have your command prompt. You can type regedit or msconfig in the command line to get them on. Or even press Alt+ ctrl+ del and start a new task to get them going
6.anyway you don’t need to get into regedit or msconfig, just insert the CD with the setup of avast. Incase you not familiar with dos commands to access the cd drive and run the setup.exe of avast you can press alt+ctrl+delete from file select new task and browse to you CD drive and select the Avast setup from there.
7. After installing it will ask you if you want to schedule a boot up on start up. Select yes. Restart your computer
8. it will detect the virus and start removing it on boot. Select yes to all when it prompts you as the virus scan is happening.
* it found 2388 infected files on my friends pc.

Let me know if this helps

Raj August 29th, 2023 at 7:40 pm

Hi,

I removed all the khatra.exe files,

but i am unable to fix the changes made by the virus.

changes made by khatra.exe

1. Desktop properties not showing.
2. Control Panel missing
3. My Computer properties disabled.
4. created virus folders in each folder with the same folder names. (The virus folder showing a 425kb storage space and type of the application is “Application”)

Due to this virus my pen drive also infected.
How to clean it.

Thanks,
Raj

anandh September 27th, 2023 at 10:16 am

dear i am affected by khatra. i can’t remove it. i do above job. but not leave.
pls pls help me.

Thang September 29th, 2023 at 3:57 am

To manually remove the virus.

1. Pleas download HiJackThis.
2. Do a scan with HiJackThis.
3. Use HiJackThis->config->MiscTool->Process manager to kill following process:
– gHOst.exe
– Khatra.exe
– Xplorer.exe
It will tried to replicate itself if one process is missing, so you have to kill them quickly.
4. Back to HiJackThis main menu., remove all thing call 3 above application.
5. Enable regedit/msconfig by HiJackThis. (You see someline like diable regedit, select remove it to enable regedit)
6. Enable other restriction: control panel/destop properties.
Use regedit go to HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer. Delete suspected entries. You may wish to disable autorun so that you cannot reinfected from USB. Remember backup them before delete in case you delete the wrong thing. – Google for these guides.
7. Restart your computer.

To remove other .exe file, you should use some advanced tools. i don’t know thing like this. I use Unix command for Win and remove them all.

MJ March 30th, 2023 at 11:22 pm

hey my admin privilege is gone how do i get it back without reinstalling i don’t have permissions even for control panel as well this virus are affecting even my Windows 7 Ultimate 64bit editions also….. :-( :-(

Abdul April 17th, 2023 at 1:44 pm

well I actually restored my system and the Khatra virus was gone !!!

P.S Khatra is a hindi word which means ‘Danger’.

Leave a Reply