KillSec is a trojan that attempts to steal login names, passwords, account details and other confidential information that the victim enters on certain German banking web sites. Gathered data is transferred to a predefined remote host. The parasite can run a hidden FTP server or a proxy. It may also download and run malicious files and block access to popular security-related web resources. KillSec runs on every Windows startup.