Backdoor.Kelihos.F
Threat Scorecard
EnigmaSoft Threat Scorecard
EnigmaSoft Threat Scorecards are assessment reports for different malware threats which have been collected and analyzed by our research team. EnigmaSoft Threat Scorecards evaluate and rank threats using several metrics including real-world and potential risk factors, trends, frequency, prevalence, and persistence. EnigmaSoft Threat Scorecards are updated regularly based on our research data and metrics and are useful for a wide range of computer users, from end users seeking solutions to remove malware from their systems to security experts analyzing threats.
EnigmaSoft Threat Scorecards display a variety of useful information, including:
Popularity Rank: The ranking of a particular threat in EnigmaSoft’s Threat Database.
Severity Level: The determined severity level of an object, represented numerically, based on our risk modeling process and research, as explained in our Threat Assessment Criteria.
Infected Computers: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
See also Threat Assessment Criteria.
| Threat Level: | 60 % (Medium) |
| Infected Computers: | 740 |
| First Seen: | July 23, 2012 |
| Last Seen: | February 4, 2025 |
| OS(es) Affected: | Windows |
The detection of Backdoor.Kelihos.F on your system indicates a potential security threat that requires immediate attention. This backdoor threat can compromise your system's security and allow unauthorized access to your data. It is essential to understand the nature of this threat and take prompt action to remove it and prevent future infections.
Table of Contents
What Is Backdoor.Kelihos.F?
Backdoor.Kelihos.F is a type of malware that creates a secret entrance to your system, allowing hackers to access and control your computer remotely. This backdoor can be used to steal sensitive information, install additional malware, or use your system as a botnet to spread spam or launch attacks on other systems. The presence of this backdoor on your system can put your personal data and online security at risk.
How Backdoor.Kelihos.F Operates
Backdoor.Kelihos.F operates by exploiting vulnerabilities in your system or using social engineering tactics to trick you into installing the malware. Once installed, it can connect to a command and control server to receive instructions from the hackers. The backdoor can then be used to upload or download files, steal login credentials, or install additional malware. It may also attempt to hide its presence by disguising itself as a legitimate program or process.
Symptoms of Infection
The symptoms of a Backdoor.Kelihos.F infection can be subtle, but they may include unusual system behavior, such as slow performance, unexpected crashes, or unfamiliar programs running in the background. You may also notice suspicious network activity, such as unusual outgoing connections or data transfers. In some cases, the backdoor may attempt to disable your security software or block access to certain websites.
- Unexplained changes to your system settings or configuration
- Appearance of unfamiliar programs or icons on your desktop
- Unexpected pop-ups or advertisements
- Slow system performance or frequent crashes
How to Remove Backdoor.Kelihos.F
- Boot your system in Safe Mode with Networking to prevent the backdoor from loading and to allow you to download and install removal tools.
- Use a reputable anti-malware tool, such as SpyHunter, to perform a full scan of your system and detect and remove the backdoor and any associated malware.
- Uninstall any suspicious programs or applications that may be related to the backdoor.
- Reset your web browsers, including Chrome, Firefox, and Edge, to their default settings to remove any malicious extensions or add-ons.
- Reboot your system and run a second scan to ensure that the backdoor and all associated malware have been removed.
Conclusion
Removing Backdoor.Kelihos.F from your system requires careful attention to detail and a comprehensive approach to ensure that all associated malware is removed. By following the steps outlined above and taking proactive measures to protect your system, you can help prevent future infections and keep your personal data and online security safe. Remember to always use reputable anti-malware tools and to keep your operating system and software up to date to reduce the risk of infection.
Aliases
15 security vendors flagged this file as malicious.
| Antivirus Vendor | Detection |
|---|---|
| AVG | Generic32.GWI |
| Kaspersky | Trojan-PSW.Win32.Tepfer.hcvw |
| McAfee | Ransom-FBGF!2D776ED1565F |
| AVG | Generic29.BWJE |
| Fortinet | W32/Kryptik.AMJC |
| Ikarus | Trojan.Win32.Bredolab |
| AhnLab-V3 | Backdoor/Win32.Bredolab |
| AntiVir | BDS/Kelihos.F.390 |
| Avast | Win32:Kryptik-KBY [Trj] |
| McAfee | FakeAlert-SecurityTool.fy |
| Kaspersky | Trojan-PSW.Win32.Tepfer.gjos |
| McAfee | Trojan-FBCP!1F5789A69AD9 |
| AntiVir | TR/Winwebsec.998514 |
| Kaspersky | Trojan-PSW.Win32.Tepfer.chmq |
| Kaspersky | Backdoor.Win32.Bredolab.zyw |
File System Details
| # | File Name | MD5 |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|---|
| 1. | nvxdsync.exe | 924b7f8947f5f67044bb9da1fef8e4ec | 12 |
| 2. | temp38.exe | 7227d508b0c994da1753160a958f0260 | 10 |
| 3. | java.exe | 808777d879377893feb9075145f10926 | 6 |
| 4. | extract.exe | 9cfe323dd6a6516c2b20f0e97e289fc3 | 5 |
| 5. | temp09.exe | 5fdcf43bcd38e4feb0f91eeb4f983617 | 5 |
| 6. | temp21.exe | be3f8eb122d02379abac87137e9d286b | 4 |
| 7. | install.exe | b54ac5b2514b02dec52b62c41f855603 | 4 |
| 8. | trustedinstaller.exe | daf48782fcd6c6da7fd7607f8d7415ff | 4 |
| 9. | mcshield.exe | f5005d9e6301bac72c542a7a3ea81d7e | 4 |
| 10. | nwiz.exe | 2ebd9f772127f48b3e63391b87e28caf | 4 |
| 11. | spoolsv.exe | 1f5789a69ad98f779126e0c297243373 | 3 |
| 12. | temp90.exe | df97969204e2e59ae891fef5618edaca | 2 |
| 13. | unzip.exe | dea9bb576ef36eccef2c82ea2870877e | 2 |
| 14. | eehsz0da.exe | 142a2b41fcdb38ec8968c0bdc4edde29 | 2 |
| 15. | lsass.exe | a74e1dfe368cc5f05cef9e5735a8a36b | 2 |
| 16. | pctspk.exe | bbd58044220d02f513cda801fd692452 | 2 |
| 17. | temp86.exe | 3c7cc6682af0df35a02aabf222d441b4 | 2 |
| 18. | temp70.exe | e84ea24e5d804e97c7e1d5447930f1c6 | 2 |
| 19. | temp55.exe | 36b82a8f13db3f2ffdc6bead6123c389 | 2 |
| 20. | zip.exe | 994b7cc4f983aa5603e241a18a6463dd | 2 |
| 21. | agent.exe | 8119d28d1f3beb3b8445b10a0bfde2c0 | 2 |
| 22. | update.exe | 2d776ed1565f8a0f7fba007452ba5615 | 2 |
| 23. | setup.exe | 424884777412acee825d05bb8a7640ed | 1 |
| 24. | temp61.exe | 61956036ed890d755f9dd6e14fb5e11d | 1 |
| 25. | temp52.exe | c780b3e5876dc0511e7635893199b724 | 1 |