Backdoor.Helios

Backdoor.Helios is a backdoor Trojan horse that gives an attacker unauthorized access to an infected computer. By default it opens port 3737 on the compromised computer. The Trojan attempts to disable some antivirus and firewall programs by terminating the active processes. It is written in Microsoft Visual Basic version 6.

Protection

• Initial Rapid Release version September 12, 2002
• Latest Rapid Release version June 22, 2009 revision 066
• Initial Daily Certified version September 12, 2002
• Latest Daily Certified version June 19, 2009 revision 051
• Initial Weekly Certified release date September 18, 2002

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Moderate

Damage

• Damage Level: Medium

Distribution

• Distribution Level: Low