H4wk13 H4wk13

Trojan detected

Trojan detected

Hi all!

 

First of all, it's the first time I'm writing here so I hope I'm writing in the right category.

Anyway, yesterday I ran a quick scan with Malwarebytes Anti-Malware and it detected something named Trojan.Hiloti. Well, I have no idea what this thing is so I want to know, is it something very dangerous? Should I change my passwords?

Please excuse me for any mistakes.

122,868 views 82 replies
Reply #26 Top

Doc why would recommend someone buying a AV program when the free ones work just as good and rank just as good? Save people some money.

Reply #27 Top

Quoting inthebloodofeden, reply 24
1)remove Spybot Search and Destroy. 2) as Gwenio1 already said, install Comodo firewall (freeware); if you are not so practical with firewall you'll need a little bit of time to know how it works, and all his features, but is an excellent one.
End of inthebloodofeden's quote

Or get Comodo Firewall (with Defense+ on if you can stand it), and leave Spybot S&D as long as Tea Timer & Security Center Integration are off and the registery protection off as well if you have Defense+ (and reinstall if need be to turn those off). The immunization features are okay, though protecting the host file can be better done with Comodo's Defense+.

Note: Comodo's Defense+ will register itself as and anti-spyware program with Security Center, however it is not a scanner so it will not have issues with spyware scanners (MSE counts itself as one) as long as it is configured to all the scanner the access it needs.

Reply #28 Top

Quoting DrJBHL, reply 19
Found this: http://www.pcworld.com/article/101910/first_jpeg_virus_identified.html
End of DrJBHL's quote

Yea I saw those.  But that is not a jpeg infecting you.  You still have to run a program (the actual virus itself).  The jpeg would just activate what is on the system. 

So unless you are already infected, viewing a picture is not going to infect you.  The way the hiloti was written up, it sounded like viewing jpegs could infect you.  if so, I wanted to warn my clients, friends and family (as that is the ONLY attachments I tell them they can open without worrying about viruses).

Thanks for the leg work. I should have told you I had seen those (but did not think about it since they were from 10 years ago).  Sorry for that.

Reply #29 Top

Quoting kona0197, reply 26
Doc why would recommend someone buying a AV program when the free ones work just as good and rank just as good? Save people some money.
End of kona0197's quote

Have to agree. I use Avira and when the premium sub ran out a couple of months ago, instead of renewing it, I started running the free version and the only difference I see in the two is a popup once a day when it updates. From what I've read in A/V lab tests, several of the freebies are as good as, if not better than, the paid versions.

Reply #30 Top

Quoting navigatsio, reply 29
From what I've read in A/V lab tests, several of the freebies are as good as, if not better than, the paid versions.
End of navigatsio's quote

Exactly. I've also read from those tests that Norton and Mcafee are bloatware.

Reply #31 Top

Quoting kona0197, reply 26
Doc why would recommend someone buying a AV program when the free ones work just as good and rank just as good? Save people some money.
End of kona0197's quote

Because I believe Kaspersky to be worth my recommendation.

Quoting Dr, reply 28
Yea I saw those.
End of Dr's quote

Look again, Dr Guy - Virus is Perrun or a variant.

Quoting navigatsio, reply 29
Have to agree.
End of navigatsio's quote

Nav: Kaspersky rates significantly better. Remember, theses ratings vary from quarter to quarter, and the free ones are usually 'on demand' rather than 'active'. Also, if you go with a free one, I'd use that as layer 2 with a heuristic AV as well.

Again, I read this stuff daily and Kaspersky is the better AV.... you don't have to take my recommendations. No one has to. 

Reply #32 Top

Quoting DrJBHL, reply 31
Nav: Kaspersky rates significantly better. Remember, theses ratings vary from quarter to quarter, and the free ones are usually 'on demand' rather than 'active'. Also, if you go with a free one, I'd use that as layer 2 with a heuristic AV as well.
End of DrJBHL's quote

I've used AVG, Avast!, and Antivir. All of them are free and scan every file as it is accessed. Is that not an "active" program? No one should have to pay money for a decent AV program. Pay versions tend to have a AV scanner surrounded by bloatware.

Reply #33 Top

Quoting kona0197, reply 32
No one should have to pay money for a decent AV program. Pay versions tend to have a AV scanner surrounded by bloatware.
End of kona0197's quote

Yes....No. ...;)

 

Reply #34 Top

When you buy an antivirus program, what you pay for is the ability to stop an attack in real time. The free versions only find something after the fact, usually when it's too late.

Reply #35 Top

Quoting willistuder, reply 34
When you buy an antivirus program, what you pay for is the ability to stop an attack in real time. The free versions only find something after the fact, usually when it's too late.
End of willistuder's quote

Depends. Some do provide realtime protection in the free version, and add other things in the paid (like a firewall).

Reply #36 Top

Quoting kona0197, reply 32
I've used AVG, Avast!, and Antivir. All of them are free and scan every file as it is accessed. Is that not an "active" program? No one should have to pay money for a decent AV program. Pay versions tend to have a AV scanner surrounded by bloatware.
End of kona0197's quote

Except that if no one paid for them then there would not be any decent AV programs except for those that are funded by the purcase of other software like MSE.

Reply #37 Top

I use AVG. It scans every file coming from and going to the hard drive, DVD drive, USB drive, external hard drive, and internet. Is that NOT real time protection?

Quoting Gwenio1, reply 36
Except that if no one paid for them then there would not be any decent AV programs except for those that are funded by the purcase of other software like MSE.
End of Gwenio1's quote

Except the fact that MSE is free as well. MSE itself doesn't rank very high as far as AV programs go. Slow detection.

Reply #38 Top

For everyone really interested in this topic, I recommend reading the highlights of a presentation given at "Black Hat".

Seems the testing done on these antivirals (at least the one by Sophos which should be praised for participating in this! Bravo!) isn't really up to snuff, and has little to do with the real world. This could be true about all of them as far as anyone can tell, so all the ratings might be out the window anyway and this whole discussion, moot.

I think the testers need to be transparent about how they test, and allow genuine researchers to "reverse engineer" their products, or say that they aren't going to allow that.

Then we'll be free to interpret testing results by ourselves.

I was rather shaken after reading this from PCMagazine: http://www.pcmag.com/article2/0,2817,2390492,00.asp

"The most common test for an antivirus utility involves showing it thousands or millions of samples and checking how many it recognizes. More advanced tests observe the product in action as it cleans up malware infestations and prevents attacks. Vulnerability researcher Tavis Ormandy feels this just isn't the right way to evaluate a product. Ormandy contends that antivirus vendors should be completely open about the way their products work, rather than hiding behind market-speak and techno-babble. 

Some vendors say that revealing their techniques and algorithms would weaken their security. Ormandy referenced Kerckhoff's principle, which states that a cryptographic system should be secure even if everything about it is public. He argues that the same should be true of antivirus software." - PCMag reference

BTW, a flying "cell tower" has been shown at Black Hat which can pick up all your conversations, and another item? "Square Reader" credit card scanner has been successfully hacked.

 

 

Reply #39 Top

Quoting DrJBHL, reply 38
BTW, a flying "cell tower" has been shown at Black Hat which can pick up all your conversations, and another item? "Square Reader" credit card scanner has been successfully hacked.
End of DrJBHL's quote

I think I just saw this on CNN. A hobbyist built a drone with cell phone hacking abilities and apparently can be fitted to look for open Wi-Fi connections and hack from the air.

Reply #40 Top

Reply #41 Top

Quoting kona0197, reply 32
I've used AVG, Avast!, and Antivir. All of them are free and scan every file as it is accessed. Is that not an "active" program? No one should have to pay money for a decent AV program. Pay versions tend to have a AV scanner surrounded by bloatware.
End of kona0197's quote
 

Well, it seems to be more specific it's REQUIRED.

I don't recommend Kaspersky in a general way; what I reccomend is Kaspersky Internet Security (also known as KIS); it costs just a little bit more of Kaspersky Antivirus (also known as KAV)  but is a totally different software. KAV is a very good one, but is just an AV, that today is simply just NOT ENOUGH.

KIS is an INTEGRATED SECURITY SUITE with a lot of different real-time protection modules, very useful extra tools and features such as Safe Run for Websites, Safe Run for Applications, Vulnerability scanner based on Secunia database, Virtual Keyboard Anti-Keylogger (everything is typed from there can not be "seen" from the OS, it doesn't matter which kind of malware could be resident in), Program Control (HIPS), System Watcher and many more.... 

Besides, one of KIS componet is probably THE BEST firewall at the moment available: very powerful and highly configurable.

I can assure you there is NOTHING you can get for free that can be compared with KIS . More, mostly (if not ALL) of other shareware Security Suite can not be compared with KIS as well. But the main point, in my opinion, is that you don't know really what you are talking about (no offense, a lot of people don't get the right info about these kind of issue). What I can say to you is this: remove your free AV  (AVG, Avast or Avira, you can reinstall it at any time, of course), download and install the trial version of Kaspersky Internet Security 2012 (it's free for 30 days with FULL functionality). There are also available instructions in PDF format.

Just try it, and you will see what I'm talking about. I hope everything is OK, but could be that your first "discover" will be that your PC is infected, and till now you don't know. 

Reply #42 Top

Quoting inthebloodofeden, reply 41

What I can say to you is this: remove your free AV  (AVG, Avast or Avira, you can reinstall it at any time, of course), download and install the trial version of Kaspersky Internet Security 2012 (it's free for 30 days with FULL functionality).
End of inthebloodofeden's quote

I've used Avast Home (FREE) for several years, and find it more than adequate for my use.
I guess that's a big fat NO to your (or anyone elses) recommendation about shelling out cash on other options.

Reply #43 Top

Cute shop of the Trojan... ;)

I think there's a spectrum of users as well as evolving problems.

Now, there are more attack target surfaces... phones, pads, increasingly complex apps (IBM has stated that for every 1,000 lines of code, there are 1-5 bugs), and increasingly complex OS's.

So, what was good protection 5 years ago isn't necessarily now.... nor is it necessarily inadequate.

Quoting inthebloodofeden, reply 41
I don't recommend Kaspersky in a general way; what I reccomend is Kaspersky Internet Security (also known as KIS); it costs just a little bit more of Kaspersky Antivirus (also known as KAV)  but is a totally different software. KAV is a very good one, but is just an AV, that today is simply just NOT ENOUGH.
End of inthebloodofeden's quote

I also advocate layered security. KIS is supposed to be excellent. I would add Mamutu 3.0 (free), and Malwarebytes (not the free one, as that is 'on demand' only). I also believe that it's a function of your own preferences. I said "supposed" because of general lack of transparency in AV's and ththeir testing.

"Threatfire". This is free (and will pop up "buy me"'s) and an outstanding malware behavior detector (does not prevent it being downloaded) note that it will offer to install a Google toolbar ("Just say no") I prefer Mamutu because it doesn't nag. I also use Comodo Dragon Chrome.

But none of this rises to the level of 'passion'.

I also believe that until AV software and 'Suites' become a lot more transparent as well as the testing methods, there's little to argue about as the tests are artificial and not standardized, and not very relevant unless the software being tested can be examined as to how threats are being handled and where they fall down and need to be improved.

 

Reply #44 Top

Quoting kona0197, reply 32
I've used AVG, Avast!, and Antivir. All of them are free and scan every file as it is accessed. Is that not an "active" program? No one should have to pay money for a decent AV program. Pay versions tend to have a AV scanner surrounded by bloatware.
End of kona0197's quote

 

Before i swapped to kaspersky internet security not kaspersky antivirus i had norton and tried AVG as well since it was free. I knew i had viruses but neither found any. I decided to go with KIS and true it found 4 or 5 different viruses infecting multiple files.  

 

They might scan the files but they need to recognize viruses, trojans ..... as well

Reply #45 Top

Quoting DrJBHL, reply 43
Cute shop of the Trojan...

I think there's a spectrum of users as well as evolving problems.

Now, there are more attack target surfaces... phones, pads, increasingly complex apps (IBM has stated that for every 1,000 lines of code, there are 1-5 bugs), and increasingly complex OS's.

So, what was good protection 5 years ago isn't necessarily now.... nor is it necessarily inadequate.
...
I also advocate layered security. KIS is excellent. I would add Mamutu 3.0 (free), and Malwarebytes (not the free one, as that is 'on demand' only). I also believe that it's a function of your own preferences.


"Threatfire". This is free (and will pop up "buy me"'s) and an outstanding malware behavior detector (does not prevent it being downloaded) note that it will offer to install a Google toolbar ("Just say no") I prefer Mamutu because it doesn't nag. I also use Comodo Dragon Chrome.
None of this rises to the level of 'passion'.

I also believe that until AV software and 'Suites' become a lot more transparent as well as the testing methods, there's little to argue about as the tests are artificial and not standardized, and not very relevant unless the software being tested can be examined as to how threats are being handled and where they fall down and need to be improved.

End of DrJBHL's quote

Mamutu is not free, and overlaps with with the Application Control in KIS. Both are Host Intrusion Prevention Systems (HIPS). And so is Comodo's Defense+ (comes as an option with the free firewall) and ThreatFire (Defense+ offers more protection, so use it if you do not have a firewall that is part of some other security suite, and these are the only ones I have looked at).

Reply #47 Top

Quoting DrJBHL, reply 46
Mamutu 3.0 was free.

http://www.techsupportalert.com/content/get-world-class-mamutu-malware-blocker-free.htm
End of DrJBHL's quote

But it not to a free product, there are just occationally special deals where it is free.

Reply #48 Top

Quoting inthebloodofeden, reply 41
I can assure you there is NOTHING you can get for free that can be compared with KIS .
End of inthebloodofeden's quote

I'm running KIS ...9.0.0.736 .... it works.

When setting up others' machines [that I'm not paying for their AV ] it's Comodo.  Seems OK enough....at least the price is right...;)

Reply #49 Top

Quoting Snowman, reply 42
I've used Avast Home (FREE) for several years, and find it more than adequate for my use. 
I guess that's a big fat NO to your (or anyone elses) recommendation about shelling out cash on other options.
End of Snowman's quote
 

What are you talking about ,Snowman? Are you jocking? Are you DRUNK? I can understand that perhaps you are one of those people that are "proud" (I apologies, but sometimes it makes me laugh..) to use only freeware security software, but please don't tell me again that I'm happy  in making people spend money. I'm not that kind of person.

I can assure you I DON'T WORK FOR KASPERSKY AND I DON'T GET ANY COMMISSION !!! What kind of security software you use is your business, not mine.

If you read my previous post in this thread (Reply # 25) after my suggestion about buying Kaspersky I suggested as well some freeware software, above all  Comodo firewall and Emsisoft Emergency KIT (ex A-squared free). 

So, please...

Thanks for understanding 

Reply #50 Top

Quoting DrJBHL, reply 43


I think there's a spectrum of users as well as evolving problems.

Now, there are more attack target surfaces... phones, pads, increasingly complex apps (IBM has stated that for every 1,000 lines of code, there are 1-5 bugs), and increasingly complex OS's.

So, what was good protection 5 years ago isn't necessarily now.... nor is it necessarily inadequate.

 
End of DrJBHL's quote
 

Agreed.

Quoting DrJBHL, reply 43

I also advocate layered security. KIS is supposed to be excellent. I would add Mamutu 3.0 (free), and Malwarebytes (not the free one, as that is 'on demand' only). I also believe that it's a function of your own preferences. I said "supposed" because of general lack of transparency in AV's and ththeir testing.

"Threatfire". This is free (and will pop up "buy me"'s) and an outstanding malware behavior detector (does not prevent it being downloaded) note that it will offer to install a Google toolbar ("Just say no") I prefer Mamutu because it doesn't nag. I also use Comodo Dragon Chrome.

But none of this rises to the level of 'passion'.

I also believe that until AV software and 'Suites' become a lot more transparent as well as the testing methods, there's little to argue about as the tests are artificial and not standardized, and not very relevant unless the software being tested can be examined as to how threats are being handled and where they fall down and need to be improved.

 
End of DrJBHL's quote
 

Well, I got Malwarebytes PRO as well (of course with real-time protection disabled because of KIS) .All other progs you mentioned, as Gwenio1 already said, are incompatible with KIS. 

About testing, this is not true for Kaspersky. That for a simple reason: as probaly you know every release of Kaspersky software has a period of beta testing before being available in market. Well, a lot of Kaspersky beta tester are simple customer (some of them are friends of mine), though they can get sometimes a free license key; it depends from their work.  Beta testers must reports all found bugs and failure, reproducing them and creating log files for developers to be sended to KL Moscow. So, there is nothing better than talking with a beta tester to really know about the prog situation; this can be easily done on official Kaspersky forums.