Win32.KheSanh
Title: Win32.KheSanh
Also Known as: Win32.KheSanh, Win32KheSanh, KheSanh
Severity scale:
This exotically named Trojan may have origins in Vietnam as it is named after a province from there. It can be downloaded directly from the Internet via freeware and shareware sites.
Once inside, it will leave the following fingerprints behind: 3d6dc4d64da04252…, 407002503be7ce1f…, c35ce6fc1d770916…, 27baa61fd12228c2…, 8af76aad0d078b76…, ae699379f8acf7fc…, 8247e74bec4789a7…, ddca8f565ec634f1…, c417a450c884cd77…, 376a312105d2ad48…, ea9db8a1e2e4d96c.
With a file size of 59392 bytes, Win32.KheSanh will only cause harm to your PC if not removed promptly. A backdoor Trojan program, it will allow additional malware to enter without your permission.
AKA:
Backdoor.Win32.KheSanh.20
Backdoor.KheSanh.20
BackDoor-EU
BackDoor.KheSanh.20
Troj/KheSanh
Backdoor:Khesanh
BKDR_KS.20
BDC/KheSanh.Cli
Win32:Trojan-gen.
BackDoor.KheSanh
Backdoor.KheSanh.Client
Bck/Khesanh
Win32/KheSanh.Client
Related Files:
[%WINDOWS%]systemtrjp.exe
Category:
Backdoor
RAT
Recommended Action:
Remove at once.
For manual removal, identify and remove all related files, folders and processes that are in conjunction with Win32.KheSanh. Detection and removal is difficult when attempting the process on your own. For a more thorough and complete system, there is SpyZooka.
SpyZooka offers a fast and easy way to get rid of spyware. SpyZooka has been removing spyware for years to the great satisfaction and delight of its innumerable customer base. SpyZooka will remove each and every last spyware program on your PC or your money back – guaranteed.
