Malware

Hiloti.2 (B) removal guide

Malware Removal

The Hiloti.2 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Hiloti.2 (B) virus can do?

  • A process attempted to delay the analysis task.
  • Performs some HTTP requests
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality
  • Installs itself for autorun at Windows startup
  • Attempts to modify proxy settings
  • Created a service that was not started

Related domains:

www.362com.com

How to determine Hiloti.2 (B)?


File Info:

crc32: E0865764
md5: 5d2e9716be941d7c77c05947390de736
name: 5D2E9716BE941D7C77C05947390DE736.mlw
sha1: 686f0089050e1013ffd80d81193b6f992b471c34
sha256: 9f13e6628458992b3e633cd3f51e876e7146ed4ce06074ff9ab394cc248d7982
sha512: 7c327c47d583b06ba97529ec6fde38ee7b44e55320fae836203fcb5f6d2b71f1c86ea690f0fce5099502fbf28a93a3d9f6800a29cbeb40c745c02c38c712c63d
ssdeep: 49152:HILTby0Xg0Q1oKPBCXihpUv8LjVD7+j38QmSS:aGpyUL7tD7+j3S
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: TenCent QQ 2020
FileVersion: 1.0.0.0
CompanyName: TenCent
Comments: QQ2020
ProductName: QQ2020
ProductVersion: 1.0.0.0
FileDescription: QQ2020
Translation: 0x0804 0x04b0

Hiloti.2 (B) also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Hiloti.2
FireEyeGeneric.mg.5d2e9716be941d7c
Qihoo-360Win32/Trojan.51f
ALYacTrojan.Agent.Blamon
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusTrojan ( 00521b151 )
BitDefenderGen:Variant.Hiloti.2
K7GWTrojan ( 00521b151 )
CrowdStrikewin/malicious_confidence_90% (W)
TrendMicroTROJ_GEN.R007C0WKC20
CyrenW32/Trojan.ZWGY-3617
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Malware-gen
KasperskyTrojan.Win32.Blamon.pwq
AlibabaTrojan:Win32/Blamon.577b0616
NANO-AntivirusTrojan.Win32.Hiloti.hjgvfs
AegisLabTrojan.Win32.Blamon.4!c
TencentWin32.Backdoor.Bp-generic.Ptem
Ad-AwareGen:Variant.Hiloti.2
EmsisoftGen:Variant.Hiloti.2 (B)
ComodoMalware@#2mbs7105c4lt6
F-SecureTrojan.TR/Blamon.brqmj
DrWebTrojan.Siggen9.42354
InvinceaMal/Generic-S
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
SophosMal/Generic-S
IkarusTrojan.Win32.Injector
AviraTR/Blamon.brqmj
MAXmalware (ai score=86)
Antiy-AVLTrojan/Win32.Blamon
KingsoftWin32.Troj.Generic_a.a.(kcloud)
MicrosoftTrojan:Win32/Occamy.C9F
ArcabitTrojan.Hiloti.2
ZoneAlarmTrojan.Win32.Blamon.pwq
GDataGen:Variant.Hiloti.2
CynetMalicious (score: 100)
McAfeeGenericRXAA-AA!5D2E9716BE94
VBA32BScope.Trojan.Wacatac
PandaTrj/GdSda.A
ESET-NOD32a variant of Win32/Packed.BlackMoon.A potentially unwanted
TrendMicro-HouseCallTROJ_GEN.R007C0WKC20
RisingTrojan.Injector!1.A1C3 (CLASSIC)
YandexRiskware.BlackMoon!6XVXShljN0o
SentinelOneStatic AI – Malicious PE
eGambitUnsafe.AI_Score_100%
FortinetRiskware/Blamon
BitDefenderThetaGen:NN.ZexaF.34634.@r0@aeemHmnb
AVGWin32:Malware-gen
Paloaltogeneric.ml
MaxSecureTrojan.Malware.1728101.susgen

How to remove Hiloti.2 (B)?

Hiloti.2 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment