Remove Helios 2.4. Description and removal instructions

Title: Helios 2.4
Type: Remote Administration Tools	Severity scale: (70 / 100)

Helios is a large RAT virus family. Different versions include
different functions, but it is no doubt, that as the number of the
version grows, so do the possibilities of the RAT and the danger of
infection. This version was created in May 2003. The author of this
pest is HelioS. The infection peaked in such countries as Czech
Republic, Russian Federation, United Kingdom and United States. This
pest was written in Visual Basic. All versions have the abilities to
disable Firewalls and kill Antivirus Protections.

From the publisher:

"File explorerÃ¡: Use this to surf on the victimÃ†s computer. You can
upload and download files, open music files, put a pic as wallpaper,
unreg/reg an ocx/dll, rename folders or files. Reg editorÃ¡: Almost the
same as REGEDIT.exe. You can Create/change Key, delete a whole reg
folder and delete a Key/value. Kernel commandÃ¡: Easy to use commands,
just read what they do. App RedirectÃ¡: ItÃ†s a MSDOS like, you can use
ipconfig, ping, netstat, well almost all DOS commands (DO NOT use
Â½Ã¡dirÃ¡+ or Â½Ã¡cdÃ¡+ commands). PluginsÃ¡: This is for all you coders out
there you can add plugins to the trojan. (Read the other manual about
Plugins to make your own) SpyÃ¡: Enum windowsÃ¡: Use this to enum all the
windows in use by the victim. You can maximize, minimize, restore,
close, bring to font, hide, show and change the title of every windows.
Have funÃ¡! Active TasksÃ¡: Like the WinXP/2k CAD. You can see everything
that is running on the victimÃ†s comp. You may close them tooÃ¡=). Steal
passwordsÃ¡: You can steal the victimÃ†s passes, but for now it works
only on Win98/ME and older. DoesnÃ†t work for Win2k/XP. KeyLoggerÃ¡: The
most useful thing I think. You can see every single key the guy hit,
abcd.. alt, enter, ctrl, etcÃ¡! And its placed in a window, where you
may delete and copy stuffs. Then you just copy paste it to a .txt and
save it as a log. Capture ScreenÃ¡: You may capture a bmp/jpg pic of
what your victim can see on his monitor. If you want to be able to
download jpg, you must first check if he has the plugin, otherway
upload itÃ¡! MsgÃ¡: Msg controlÃ¡: You may use this to makes a popup
appear on your victimÃ†sÃ¡!! You can makes every sort of popup, choose
the title and what you want to put in it. You can use Matrix too, your
target will have a black screen and your text in green ( like in matrix
the movieÃ¡), btw do not forget to Stop matrix if you want your victim
to be able to see something.. lol. Chat with victimÃ¡: The title is
kinda obvious. You can make a window popup on the victimÃ†s comp and he
canÃ†t close it. ( it closes when YOU close it. ). Then you can chat
with your victim =)Ã¡! MiscÃ¡: Misc 1Ã¡: Well just open it, it doesnt need
any comment I think. Very funny part of the trojanÃ¡! ( You can for
example, disable the mouse, keyboard, hide the startup bar, button and
moreÃ¡! ) Misc 2Ã¡: Here you can get the resolution of your victim,
change it. Get and change every color of everything on his comp. Get
his computer name and change it ( need the target to reboot to see the
difference ). OtherÃ¡: PowerÃ¡: Here you can play with Shutdown, Force
shutdown, Reboot, Logoff, Reset and interact with the victimÃ†s
CDROM(s). You can open and close themÃ¡! WinAmpÃ¡: You can get the compÃ†s
PlayList, run his winamp, get a song, starts the AVS, pause/play/change
song and change the volume"

FORUM:
Discuss Helios 2.4 in
spyware removal forum

Helios 2.4 properties:
• Allows remote user connection
• Logs keystrokes
• Hides from the user
• Stays resident in background

Automatic Helios 2.4 removal:

remover for Helios 2.4

Helios 2.4 manual removal:

Kill processes:
client-v2.4.exe, editserver-v2.4.exe

HELP:
how to kill malicious processes

Unregister DLLs:
hs-icon.dll, jpg-plugin2.dll, msn-plugin.dll

HELP:
how to unregister malicious DLLs

Delete files:
client-v2.4.exe, editserver-v2.4.exe, helios-trojan-readme.doc, hs-icon.dll, jpg-plugin2.dll, msn-plugin.dll, update.inf

HELP:
how to remove harmful files

Other programs to remove Helios 2.4:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 29/03/05
Information updated: 29/03/05

Additional resources related to Helios 2.4:

Attention: If you know or you have a website or page about Helios 2.4 removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about Helios 2.4 parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.