TCP_KELIHOS_CONN

Heuristic Detection

This is the Trend Micro heuristic detection for suspicious files that manifest similar behavior and characteristics as the following malware:

• Communication to command and control servers

If your Trend Micro product detects a file under this detection name, do not execute the file.

NOTES:

The following malware families are related to this detection:

• KELIHOS

If your Trend Micro product detects malicious network packets, your system may have malware that sends the network packets. Scan your system with your Trend Micro product to locate the malware. Delete the malware immediately, especially if the detected files came from an untrusted or an unknown source (e.g., a website of doubtful nature).

However, if you have reason to believe that the detected file is non-malicious, you may submit a sample for further analysis. Detailed analysis will be done on submitted samples, and corresponding removal instructions will be provided, if necessary.