How to remove “Trojan.Kelihos.100136”?

The Trojan.Kelihos.100136 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Kelihos.100136 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Trojan.Kelihos.100136?


File Info:
name: F44A51DCCE49F24ECDD6.mlw
path: /opt/CAPEv2/storage/binaries/820c359293c8edcb0f3f467a6faa126c3d076276fd95a76c72b67bde125b3bc1
crc32: D072883F
md5: f44a51dcce49f24ecdd699d543219173
sha1: 8f264b2f763880b94e3f001fba974ad4c4470419
sha256: 820c359293c8edcb0f3f467a6faa126c3d076276fd95a76c72b67bde125b3bc1
sha512: 437b6b8c4598ddacaf86bc8f96356310e221bc1d19d1c71df5f99bee8313a806ad129d03919646f0d5004b5098401f7125d68bb9d187636d05bbaddc3c21a8c1
ssdeep: 384:0B6FXedfTdAXX5gUMMziDXKA9Wex1gFffwyeiIW8GVksw572u1kYn7Y:0B+Xe9o+UdieAFowycGJO2u1Nn7Y
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15123A5210AA689AFD3115AB6D5BD5BA65F11B8040F108DFB47D6AE36183AED08C7DF0C
sha3_384: 32abcebc3239be378e58b3cd53d25af8d40b41c5d7c86866d9544d458a5c853675f4ef671ccd1d5f994b74a9dede794f
ep_bytes: 558bec6aff6808674000689030400064
timestamp: 2015-11-15 15:59:07

Version Info:
0: [No Data]

Trojan.Kelihos.100136 also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.Agent.BPCX
FireEye	Generic.mg.f44a51dcce49f24e
CAT-QuickHeal	Trojan.Kelihos.100136
McAfee	Packed-GB!F44A51DCCE49
Cylance	unsafe
Zillya	Trojan.Injector.Win32.340032
CrowdStrike	win/malicious_confidence_70% (D)
K7GW	Trojan ( 004eb1841 )
K7AntiVirus	Trojan ( 004eb1841 )
Arcabit	Trojan.Agent.BPCX
BitDefenderTheta	Gen:NN.ZexaF.36164.duW@aGeBu9m
Symantec	SMG.Heur!gen
ESET-NOD32	a variant of Win32/Injector_AGen.VU
APEX	Malicious
ClamAV	Win.Malware.Bpnu-9866966-0
BitDefender	Trojan.Agent.BPCX
NANO-Antivirus	Trojan.Win32.Stealer.dzlnxh
Avast	Win32:Wauchos-AC [Trj]
Emsisoft	Trojan.Agent.BPCX (B)
Baidu	Win32.Trojan.Injector.hq
F-Secure	Trojan.TR/Bagsu.artoo
DrWeb	Trojan.PWS.Stealer.16677
VIPRE	Trojan.Agent.BPCX
McAfee-GW-Edition	Packed-GB!F44A51DCCE49
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-S
Jiangmin	Trojan.PSW.Tepfer.amk
Google	Detected
Avira	TR/Bagsu.artoo
Antiy-AVL	Trojan[PSW]/Win32.Tepfer
Xcitium	Backdoor.Win32.Kelihos.RRD@66ywdh
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Trojan.Agent.BPCX
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.MDA.R171230
ALYac	Trojan.Agent.BPCX
MAX	malware (ai score=89)
Malwarebytes	Ransom.CryptoWall
Rising	Backdoor.Kelihos!8.543 (TFE:2:VzvUlZqNFdC)
Fortinet	W32/Injector.CPMD!tr
AVG	Win32:Wauchos-AC [Trj]
DeepInstinct	MALICIOUS

How to remove Trojan.Kelihos.100136?

Trojan.Kelihos.100136 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X