Threat Database Backdoors BKDR_HELOAG.SM

BKDR_HELOAG.SM

BKDR_HELOAG.SM is a backdoor program that is typically dropped or downloaded onto a PC by other malware. BKDR_HELOAG.SM is part of a Command-and-Control botnet that can create threads to connect with multiple IP addresses and receive arbitrary commands. Upon execution, BKDR_HELOAG.SM will connect to a remote server and send the infected computers details to it. BKDR_HELOAG.SM may also install additional malware onto a system and give attackers access to confidential information. The presence of BKDR_HELOAG.SM will cause your system to deteriorate in performance therefore this computer threat should be removed upon detection.

File System Details

BKDR_HELOAG.SM may create the following file(s):
# File Name Detections
1. %Windows%\ThunderUpdate.exe

Registry Details

BKDR_HELOAG.SM may create the following registry entry or registry entries:
Shell = "Explorer.exe
Windows NT\CurrentVersion\Winlogon
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\

Trending

Most Viewed

Loading...