| Common names: |
Lineage.KHE |
| Technical names: |
|
| Alias: |
|
| |
|
| Type: |
VIRUS |
| Size: |
107045 Bytes |
| |
|
DETECTIONS
|
| Number of sightings: |
|
| Date first seen: |
August 26, 2010 at 09:34 AM |
| Country first seen in: |
|
| Country last seen in: |
|
| |
|
|
|
Brief Description
Lineage.KHE is a virus that spreads to other computers by copying its code to other files or programs.
It captures certain information entered or saved by the user, with the corresponding threat to privacy: passwords saved by certain Windows services.
It uses stealth techniques to avoid being detected by the user:
- It deletes the original file from which it was run once it is installed on the computer.
Lineage.KHE does not spread automatically using its own means. It needs an attacking user's intervention in order to reach the affected computer. The means of transmission used include, among others, floppy disks, CD-ROMs, email messages with attached files, Internet downloads, FTP, IRC channels, peer-to-peer (P2P) file sharing networks, etc.
Lineage.KHE spreads to other computers by copying its code to other files or programs. It has damaging effects on the affected computer.
It avoids being detected by the user by using the following techniques:
- It deletes the original file from which it was run once it is installed on the computer.
It captures certain information entered or saved by the user, with the corresponding threat to privacy:
- Passwords saved by certain Windows services.
More information about virus Lineage.KHE in the Encyclopedia