Home Malware Programs Trojans Trojan:Win32/Hiloti.gen!D

Trojan:Win32/Hiloti.gen!D

Posted: May 4, 2011

Trojan:Win32/Hiloti.gen!D is a generic label for a subtype of Trojan that monitors your web-browsing habits and downloads and installs malicious files onto your computer. As a severe-level threat, Trojan:Win32/Hiloti.gen!D shows no obvious signs of Trojan:Win32/Hiloti.gen!D's presence and may not even show a running memory process, since Trojan:Win32/Hiloti.gen!D is able to hook itself into natural Windows processes. In addition to the attacks noted above, Trojan:Win32/Hiloti.gen!D can create pop-ups and modify HTML web page content. You should use advanced anti-malware programs to remove Trojan:Win32/Hiloti.gen!D, since Trojan:Win32/Hiloti.gen!D is a sophisticated threat and may be very difficult to delete without software-based help.

Trojan:Win32/Hiloti.gen!D: A Subverter of Windows Processes

Trojan:Win32/Hiloti.gen!D was first recorded in 2010 but is still a considerable danger that remains distributed in the wild. Like many other Trojan s, Trojan:Win32/Hiloti.gen!D tries to conceal itself in a Windows system folder with a random name; this file may be detectable with a .dll suffix.

The most insidious aspect of Trojan:Win32/Hiloti.gen!D is its ability to hook into two natural Windows processes: explorer.exe (the Windows file management system) and iexplore.exe (Internet Explorer). Since these processes are normally in use by default, Trojan:Win32/Hiloti.gen!D can run all the time without your consent and without being seen as an independent memory process.

Initial execution of Trojan:Win32/Hiloti.gen!D is followed by up a download of special configuration information that tells Trojan:Win32/Hiloti.gen!D what attacks Trojan:Win32/Hiloti.gen!D should perform on your computer. Some of the most common problems linked to Trojan:Win32/Hiloti.gen!D infections consist of:

  • Pop-ups that are created spontaneously or when you use your web browser.
  • Modified web page HTML content, including the insertion of scripts or links or the presentation of false information (like fake 'unsafe website' warnings).
  • Holes in your security like opened ports or firewall exceptions. These holes are created by Trojan:Win32/Hiloti.gen!D to let it download other malicious files which can be installed without your consent.

Trojan:Win32/Hiloti.gen!D is Spyware as Well as Trojan

Trojan:Win32/Hiloti.gen!D can also track various types of information related to your web browser; you should consider all browser-related data to be vulnerable until you've confirmed the successful removal of Trojan:Win32/Hiloti.gen!D. One primary data-capturing mechanism that Trojan:Win32/Hiloti.gen!D uses is to search for certain popular strings in URLs, such as:

alexa.
alltheweb.com
altavista.
aol.
asiaco.
bbc.
.bing.com
.live.
.msn.
.google.
.search123.
.teoma.
.wanadoo.
250000.co.uk

Trying to remove Trojan:Win32/Hiloti.gen!D with the Windows Malicious Software Tool may fail, since some versions of Trojan:Win32/Hiloti.gen!D will monitor the MRT.exe process and terminate it unless the process has already been corrupted.

It's strongly suggested that you use suitable anti-malware scanners to remove Trojan:Win32/Hiloti.gen!D, since Trojan:Win32/Hiloti.gen!D is an advanced threat that's difficult to remove without the help of software tools. Allowing Trojan:Win32/Hiloti.gen!D to remain on your PC is extremely inadvisable due to the high level of security risk present in Trojan:Win32/Hiloti.gen!D, although you may see no externally visible indicators of Trojan:Win32/Hiloti.gen!D attacking your computer.

Related Posts

Loading...