Home Malware Programs Trojans Hacktool.WindowsLoader

Hacktool.WindowsLoader

Posted: June 19, 2012

Threat Metric

Ranking: 9,266
Threat Level: 5/10
Infected PCs: 8,101
First Seen: October 12, 2011
Last Seen: September 30, 2023
OS(es) Affected: Windows

Hacktool.WindowsLoader is a Windows Trojan that allows attackers to gain remote access and control over the infected computer system. Hacktool.WindowsLoader contains keylogging capabilities, can steal personal information such as user names and passwords, and can even use your personal IM and email accounts to launch mass email attacks. Hacktool.WindowsLoader does not have an interface, and all its malicious components function stealthily deep in the system background. Hacktool.WindowsLoader is also detected as a rootkit Trojan; therefore, its malicious files can be disguised from security software detection and deletion. When installed, Hacktool.WindowsLoader makes various system changes including deleted Windows controls or reduced PC performance speeds. Hacktool.WindowsLoader can delete computer data and make irretrievable damage. Hacktool.WindowsLoader removes privileges to access certain Windows tools such as Task Manager. Hacktool.WindowsLoader can alter security policies, create untraceable Internet connections, register BHO (browser helper objects) to record your browsing habits, or even issue various bogus security related notifications.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



Hazar v1.2.exe File name: Hazar v1.2.exe
Size: 10.78 MB (10787373 bytes)
MD5: d0657d44a88e5ae7cfc94ccf8de22291
Detection count: 792
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: October 2, 2023
C:\Users\<username>\Documents\tut outline\MiniPro\log\Activity.dll File name: Activity.dll
Size: 229.42 KB (229428 bytes)
MD5: fb6917b50eeb4fa7984d11a971a3f833
Detection count: 342
File type: Dynamic link library
Mime Type: unknown/dll
Path: C:\Users\<username>\Documents\tut outline\MiniPro\log\Activity.dll
Group: Malware file
Last Updated: July 31, 2023
C:\Samsung-backup\Steero-user\Downloads\keylogger\Keylogger\iSafeProtect.dll File name: iSafeProtect.dll
Size: 79.36 KB (79360 bytes)
MD5: e946ff867fc386d3ba0bdd485b14395a
Detection count: 283
File type: Dynamic link library
Mime Type: unknown/dll
Path: C:\Samsung-backup\Steero-user\Downloads\keylogger\Keylogger\iSafeProtect.dll
Group: Malware file
Last Updated: July 31, 2023
C:\Documents and Settings\<username>\My Documents\Genuine_win XP_by alshhab\Genuine_win XP_by alshhab.exe File name: Genuine_win XP_by alshhab.exe
Size: 2.36 MB (2360726 bytes)
MD5: 3a883a3a9fda7e85d3576c5346cb7d4b
Detection count: 173
File type: Executable File
Mime Type: unknown/exe
Path: C:\Documents and Settings\<username>\My Documents\Genuine_win XP_by alshhab\Genuine_win XP_by alshhab.exe
Group: Malware file
Last Updated: September 26, 2023
Activity.dll File name: Activity.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Genuine_win XP_by alshhab.exe File name: Genuine_win XP_by alshhab.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
iSafeProtect.dll File name: iSafeProtect.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
tc7.exe File name: tc7.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Loading...