Trojan

Trojan:Win32/Hokobot.B!dha removal guide

Malware Removal

The Trojan:Win32/Hokobot.B!dha is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Hokobot.B!dha virus can do?

    How to determine Trojan:Win32/Hokobot.B!dha?

    
    

    File Info:

    crc32: 7CFB8729
    md5: 22872f40f5aad3354bbf641fe90f2fd6
    name: ef47aaf4e964e1e1b7787c480e60a744550de847618510d2bf54bbc5bda57470
    sha1: 8e13ca81c3a1f8f67fd2168119d6912f10197bcd
    sha256: ef47aaf4e964e1e1b7787c480e60a744550de847618510d2bf54bbc5bda57470
    sha512: 45c8adca100c85386256f1a9ccc1d04d2118b9dca2d3ba448f9b2cb674c22fa24af7b58cd17f1ee6fff57b435070859b46665c45b7b5acb153675b89b5706f2b
    ssdeep: 1536:HKYtidWRWFcB7bttSVHM0OraO73bHb6usR3J/GFNneDqnVjrI9Yo8ZmPkhMGlYj6:HvqIZhtsHM0iuEHVw98ZqglYj6
    type: PE32 executable (GUI) Intel 80386, for MS Windows

    Version Info:

    LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
    InternalName: rundll32.exe
    FileVersion: 2, 0, 0, 1
    CompanyName: Microsoft Corporation
    ProductName: Windows Help Service
    ProductVersion: 2, 0, 0, 1
    FileDescription: Windows Help Service
    OriginalFilename: rundll32.exe
    Translation: 0x0409 0x04b0

    Trojan:Win32/Hokobot.B!dha also known as:

    BkavW32.EncapterLTP.Trojan
    MicroWorld-eScanGen:Variant.Zusy.135184
    FireEyeGeneric.mg.22872f40f5aad335
    McAfeeGeneric.dgg
    CylanceUnsafe
    VIPRETrojan.Win32.Generic!BT
    SangforMalware
    K7AntiVirusTrojan ( 0055e3dd1 )
    BitDefenderGen:Variant.Zusy.135184
    K7GWTrojan ( 0055e3dd1 )
    Cybereasonmalicious.0f5aad
    TrendMicroBKDR_EXPLOSIVE.A
    BitDefenderThetaGen:NN.ZexaF.34090.hq1@aeYvijni
    F-ProtW32/Explosive.C.gen!Eldorado
    SymantecTrojan.Explod
    ESET-NOD32a variant of Win32/Agent.PTM
    TrendMicro-HouseCallBKDR_EXPLOSIVE.A
    Paloaltogeneric.ml
    ClamAVWin.Trojan.Explosive-6538489-0
    GDataGen:Variant.Zusy.135184
    KasperskyHEUR:Trojan.Win32.Generic
    AlibabaTrojan:Win32/Hokobot.785533a8
    NANO-AntivirusTrojan.Win32.Explosive.dqdpmj
    ViRobotTrojan.Win32.Explosive.123410
    AegisLabTrojan.Win32.Generic.4!c
    TencentWin32.Trojan.Generic.Hprz
    Ad-AwareGen:Variant.Zusy.135184
    SophosTroj/Explos-A
    ComodoMalware@#4vw9g126csvu
    F-SecureTrojan.TR/Agent.123409
    DrWebTrojan.PWS.Stealer.27245
    ZillyaTrojan.Explosive.Win32.1
    McAfee-GW-EditionBehavesLike.Win32.ICLoader.ch
    SentinelOneDFI – Malicious PE
    EmsisoftGen:Variant.Zusy.135184 (B)
    APEXMalicious
    CyrenW32/Explosive.C.gen!Eldorado
    JiangminTrojan/Explosive.k
    AviraTR/Agent.123409
    Antiy-AVLTrojan/Win32.AGeneric
    Endgamemalicious (high confidence)
    ArcabitTrojan.Zusy.D21010
    AhnLab-V3Trojan/Win32.Agent.C779381
    ZoneAlarmHEUR:Trojan.Win32.Generic
    MicrosoftTrojan:Win32/Hokobot.B!dha
    Acronissuspicious
    ALYacGen:Variant.Zusy.135184
    MAXmalware (ai score=100)
    VBA32Trojan.Explosive
    PandaTrj/Genetic.gen
    RisingTrojan.Agent!8.B1E (CLOUD)
    YandexTrojan.Explosive!
    IkarusTrojan.Win32.Hokobot
    eGambitTrojan.Generic
    FortinetW32/Generic.AC.4160D8
    WebrootW32.Trojan.Gen
    AVGWin32:Explosive-G [Trj]
    AvastWin32:Explosive-G [Trj]
    CrowdStrikewin/malicious_confidence_60% (W)
    Qihoo-360Win32/Trojan.a75

    How to remove Trojan:Win32/Hokobot.B!dha?

    Trojan:Win32/Hokobot.B!dha removal tool
    • Download and install GridinSoft Anti-Malware.
    • Open GridinSoft Anti-Malware and perform a “Standard scan“.
    • Move to quarantine” all items.
    • Open “Tools” tab – Press “Reset Browser Settings“.
    • Select proper browser and options – Click “Reset”.
    • Restart your computer.

    About the author

    Paul Valéry

    I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

    Leave a Comment