Win32.KheSanh

This exotically named Trojan may have origins in Vietnam as it is named after a province from there.  It can be downloaded directly from the Internet via freeware and shareware sites.

Once inside, it will leave the following fingerprints behind: 3d6dc4d64da04252…, 407002503be7ce1f…, c35ce6fc1d770916…, 27baa61fd12228c2…, 8af76aad0d078b76…, ae699379f8acf7fc…, 8247e74bec4789a7…, ddca8f565ec634f1…, c417a450c884cd77…, 376a312105d2ad48…, ea9db8a1e2e4d96c.

With a file size of 59392 bytes, Win32.KheSanh will only cause harm to your PC if not removed promptly.  A backdoor Trojan program, it will allow additional malware to enter without your permission.

AKA:
Backdoor.Win32.KheSanh.20
Backdoor.KheSanh.20
BackDoor-EU
BackDoor.KheSanh.20
Troj/KheSanh
Backdoor:Khesanh
BKDR_KS.20
BDC/KheSanh.Cli
Win32:Trojan-gen.
BackDoor.KheSanh
Backdoor.KheSanh.Client
Bck/Khesanh
Win32/KheSanh.Client

Related Files:
[%WINDOWS%]systemtrjp.exe

Category:
Backdoor
RAT

Recommended Action:
Remove at once.

For manual removal, identify and remove all related files, folders and processes that are in conjunction with Win32.KheSanh.  Detection and removal is difficult when attempting the process on your own.  For a more thorough and complete system, there is ZookaWare PC Cleaner.

ZookaWare PC Cleaner offers a fast and easy way to get rid of spyware.  ZookaWare PC Cleaner has been removing spyware for years to the great satisfaction and delight of its innumerable customer base.  ZookaWare PC Cleaner will remove each and every last spyware program on your PC or your money back – guaranteed.

Download Free Scan
ZookaWare runs on Windows Vista, 7, 8 and 10. It has no ads, popups or bundled software and fully uninstalls by clicking Start > All Programs > select ZookaWare and click Uninstall.

One Response

  1. Ellis Kerr says:

    This program can detect and remove spyware that are hard to find. Simple to use, with great results! Win32.KheSanh was removed and my PC runs great!

Leave a Reply

Your email address will not be published. Required fields are marked *

css.php