Threat Database Backdoors Backdoor.Kelihos.F

Backdoor.Kelihos.F

By CagedTech in Backdoors
Published:
Last updated:

Threat Scorecard

Threat Level: 60 % (Medium)
Infected Computers: 740
First Seen: July 23, 2012
Last Seen: February 4, 2025
OS(es) Affected: Windows

The detection of Backdoor.Kelihos.F on your system indicates a potential security threat that requires immediate attention. This backdoor threat can compromise your system's security and allow unauthorized access to your data. It is essential to understand the nature of this threat and take prompt action to remove it and prevent future infections.

What Is Backdoor.Kelihos.F?

Backdoor.Kelihos.F is a type of malware that creates a secret entrance to your system, allowing hackers to access and control your computer remotely. This backdoor can be used to steal sensitive information, install additional malware, or use your system as a botnet to spread spam or launch attacks on other systems. The presence of this backdoor on your system can put your personal data and online security at risk.

How Backdoor.Kelihos.F Operates

Backdoor.Kelihos.F operates by exploiting vulnerabilities in your system or using social engineering tactics to trick you into installing the malware. Once installed, it can connect to a command and control server to receive instructions from the hackers. The backdoor can then be used to upload or download files, steal login credentials, or install additional malware. It may also attempt to hide its presence by disguising itself as a legitimate program or process.

Symptoms of Infection

The symptoms of a Backdoor.Kelihos.F infection can be subtle, but they may include unusual system behavior, such as slow performance, unexpected crashes, or unfamiliar programs running in the background. You may also notice suspicious network activity, such as unusual outgoing connections or data transfers. In some cases, the backdoor may attempt to disable your security software or block access to certain websites.

  • Unexplained changes to your system settings or configuration
  • Appearance of unfamiliar programs or icons on your desktop
  • Unexpected pop-ups or advertisements
  • Slow system performance or frequent crashes

How to Remove Backdoor.Kelihos.F

  1. Boot your system in Safe Mode with Networking to prevent the backdoor from loading and to allow you to download and install removal tools.
  2. Use a reputable anti-malware tool, such as SpyHunter, to perform a full scan of your system and detect and remove the backdoor and any associated malware.
  3. Uninstall any suspicious programs or applications that may be related to the backdoor.
  4. Reset your web browsers, including Chrome, Firefox, and Edge, to their default settings to remove any malicious extensions or add-ons.
  5. Reboot your system and run a second scan to ensure that the backdoor and all associated malware have been removed.

Conclusion

Removing Backdoor.Kelihos.F from your system requires careful attention to detail and a comprehensive approach to ensure that all associated malware is removed. By following the steps outlined above and taking proactive measures to protect your system, you can help prevent future infections and keep your personal data and online security safe. Remember to always use reputable anti-malware tools and to keep your operating system and software up to date to reduce the risk of infection.

Aliases

15 security vendors flagged this file as malicious.

Antivirus Vendor Detection
AVG Generic32.GWI
Kaspersky Trojan-PSW.Win32.Tepfer.hcvw
McAfee Ransom-FBGF!2D776ED1565F
AVG Generic29.BWJE
Fortinet W32/Kryptik.AMJC
Ikarus Trojan.Win32.Bredolab
AhnLab-V3 Backdoor/Win32.Bredolab
AntiVir BDS/Kelihos.F.390
Avast Win32:Kryptik-KBY [Trj]
McAfee FakeAlert-SecurityTool.fy
Kaspersky Trojan-PSW.Win32.Tepfer.gjos
McAfee Trojan-FBCP!1F5789A69AD9
AntiVir TR/Winwebsec.998514
Kaspersky Trojan-PSW.Win32.Tepfer.chmq
Kaspersky Backdoor.Win32.Bredolab.zyw

File System Details

Backdoor.Kelihos.F may create the following file(s):
# File Name MD5 Detections
1. nvxdsync.exe 924b7f8947f5f67044bb9da1fef8e4ec 12
2. temp38.exe 7227d508b0c994da1753160a958f0260 10
3. java.exe 808777d879377893feb9075145f10926 6
4. extract.exe 9cfe323dd6a6516c2b20f0e97e289fc3 5
5. temp09.exe 5fdcf43bcd38e4feb0f91eeb4f983617 5
6. temp21.exe be3f8eb122d02379abac87137e9d286b 4
7. install.exe b54ac5b2514b02dec52b62c41f855603 4
8. trustedinstaller.exe daf48782fcd6c6da7fd7607f8d7415ff 4
9. mcshield.exe f5005d9e6301bac72c542a7a3ea81d7e 4
10. nwiz.exe 2ebd9f772127f48b3e63391b87e28caf 4
11. spoolsv.exe 1f5789a69ad98f779126e0c297243373 3
12. temp90.exe df97969204e2e59ae891fef5618edaca 2
13. unzip.exe dea9bb576ef36eccef2c82ea2870877e 2
14. eehsz0da.exe 142a2b41fcdb38ec8968c0bdc4edde29 2
15. lsass.exe a74e1dfe368cc5f05cef9e5735a8a36b 2
16. pctspk.exe bbd58044220d02f513cda801fd692452 2
17. temp86.exe 3c7cc6682af0df35a02aabf222d441b4 2
18. temp70.exe e84ea24e5d804e97c7e1d5447930f1c6 2
19. temp55.exe 36b82a8f13db3f2ffdc6bead6123c389 2
20. zip.exe 994b7cc4f983aa5603e241a18a6463dd 2
21. agent.exe 8119d28d1f3beb3b8445b10a0bfde2c0 2
22. update.exe 2d776ed1565f8a0f7fba007452ba5615 2
23. setup.exe 424884777412acee825d05bb8a7640ed 1
24. temp61.exe 61956036ed890d755f9dd6e14fb5e11d 1
25. temp52.exe c780b3e5876dc0511e7635893199b724 1
More files