Malware

How to remove “NetTool.Win32.TorJok.kc”?

Malware Removal

The NetTool.Win32.TorJok.kc is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What NetTool.Win32.TorJok.kc virus can do?

  • Starts servers listening on 127.0.0.1:9050
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
  • Installs Tor on the infected machine
  • Writes a potential ransom message to disk
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine NetTool.Win32.TorJok.kc?


File Info:

crc32: 0EE2C998
md5: 9c88a831945f265dba505eda752eb55d
name: tor-0.2.0.27a-rc-win32.exe
sha1: 7a96b457fb16db2228888a0da65fc1e2070ca469
sha256: 31ad9e71794938121a2c3df844fd3c28836080beb87aad669d0372c32bc486df
sha512: 548f044b5fd94def341c22b00ca19f5f631cb3cdae29a3f23fa6771ec6fc3b103decd317f3d6353863dec7561fdd0b66d4bf7f945524ea20233b4913ad7ace0f
ssdeep: 49152:yqdUcPxn02OTEE+vXcHvKABSozGUkOFLGLE49HkM:yWTR08E4XESozGUpFLGLx
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:

LegalCopyright: xa92004-2008, Roger Dingledine, Nick Mathewson
FileVersion: 0.2.0.27-rc
LegalTrademarks: Three line BSD
Comments: https://www.torproject.org/
ProductName: The Onion Router: Tor
FileDescription: Tor is an implementation of Onion Routing. You can read more at https://www.torproject.org/
Translation: 0x0000 0x04e4

NetTool.Win32.TorJok.kc also known as:

AegisLabRiskware.Win32.TorJok.1!c
Kasperskynot-a-virus:NetTool.Win32.TorJok.kc
AlibabaNetTool:Win32/TorJok.4a6f0292
Antiy-AVLRiskWare[NetTool]/Win32.TorJok
MicrosoftPUA:Win32/Presenoker
ZoneAlarmnot-a-virus:NetTool.Win32.TorJok.kc
MaxSecureTrojan.Malware.11430998.susgen
Qihoo-360Win32/Virus.NetTool.353

How to remove NetTool.Win32.TorJok.kc?

NetTool.Win32.TorJok.kc removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment