Published Sep 22, 2011|Updated Sep 28, 2011


Alert level: Severe Detected with Windows Defender Antivirus

Also detected as: Hlux botnet (Kaspersky)

Win32/Kelihos is a trojan family that distributes spam email messages. The spam messages could contain hyperlinks to installers of Win32/Kelihos malware. The malware may communicate with remote servers to exchange information that is used to execute various tasks, including sending spam email, capturing sensitive information or downloading and executing arbitrary files.


Latest news