We’d like to remind Forumites to please avoid political debate on the Forum.

This is to keep it a safe and useful space for MoneySaving discussions. Threads that are – or become – political in nature may be removed in line with the Forum’s rules. Thank you for your understanding.

📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!

Hiloti Trojan

13

Comments

  • aliEnRIK
    aliEnRIK Posts: 17,741 Forumite
    Part of the Furniture Combo Breaker
    Thats ok

    Id recommend one final scan then start updating windows

    Download and run the FREE version of DR WEB (12 hours running is quite normal, maybe run overnight?)
    http://www.freedrweb.com/download+cureit/gr/
    Turn your anti virus OFF
    It will auto QUICK scan
    After that set to scan the WHOLE computer and press the 'play' icon
    ***DO NOT UPGRADE TO FULL VERSION***
    :idea:
  • Thanks I'll give that a go and report back tomorrow!
  • After alienRIK's advise, remove the ask toolbar:
    ASK Toolbar Remover - AutoClean
  • Just a quick question - Dr Web is still running. It's found 2 lots of Trojan.Hiloti.2 but when it asks what I want to do with them and I press the 'cure' button it responds that they are 'incurable' and asks if I want to 'move' them. I clicked to for that - is that what I should be doing?
    TIA
  • aliEnRIK
    aliEnRIK Posts: 17,741 Forumite
    Part of the Furniture Combo Breaker
    Thats fine
    :idea:
  • pskill.exe;C:\ProgramFiles\MAXPHONEDECT ;Tool.ProcessKill.7;Incurable.Deleted.;ayodaribiy.dll.vir;C:\Qoobox\Quarantine\C\WINDOWS;Trojan.Hiloti.2;Incurable.Moved.;A0614712.dll;C:\System Volume Information\_restore{BA60118A-6D48-4041-A957-B8ED25657821}\RP1867;Trojan.Hiloti.2;Incurable.Moved.;

    Morning - this is the log - I haven't rebooted or anything yet......
  • aliEnRIK
    aliEnRIK Posts: 17,741 Forumite
    Part of the Furniture Combo Breaker
    Should be ok to update windows etc now

    Run ccleaner first to clean out temp files etc

    Download CCLEANER
    http://www.piriform.com/ccleaner/download/slim
    Run the CLEANER scan (UNTICK 'cookies')
    Then run the REGISTRY scan (Backup the registry when it asks)
    :idea:
  • Hi
    System won't boot up now :( It gets to the page when you choose the account and then gets stuck on 'loading your settings'
    Shall I run crapcleaner in safe mode and then try again?
    Thanks for the help.....
  • Ran crapcleaner in safe mode but I still can't get into the system normally :( It lets me choose the account but still sticking at 'loading your settings'
    Is there anything else we can try please?
  • aliEnRIK
    aliEnRIK Posts: 17,741 Forumite
    Part of the Furniture Combo Breaker
    Youve had a very nasty trojan. Theres a fair chance theres still some in there somewhere

    Its your call here on in. Personally id recommend formatting and reinstalling windows

    If you wish to try battling on then go into safe mode

    Download GLARY UTILITIES
    http://www.glaryutilities.com/download/gusetup_slim.exe
    REBOOT then run the ONE CLICK scan
    Goto MODULES / SYSTEM TOOLS / WINDOWS STANDARD TOOLS / then run SYSTEM FILE CHECKER

    if no good (Or you dont have a disc to load windows), go into normal mode and see if pressing DEL, CTRL and ALT will bring up task manager
    If it does, goto RUN and run ~
    explorer.exe

    If its still dead then id probably recommend creating a new account and using that instead
    :idea:
This discussion has been closed.
Meet your Ambassadors

🚀 Getting Started

Hi new member!

Our Getting Started Guide will help you get the most out of the Forum

Categories

  • All Categories
  • 352.4K Banking & Borrowing
  • 253.7K Reduce Debt & Boost Income
  • 454.4K Spending & Discounts
  • 245.4K Work, Benefits & Business
  • 601.2K Mortgages, Homes & Bills
  • 177.6K Life & Family
  • 259.3K Travel & Transport
  • 1.5M Hobbies & Leisure
  • 16K Discuss & Feedback
  • 37.7K Read-Only Boards

Is this how you want to be seen?

We see you are using a default avatar. It takes only a few seconds to pick a picture.