Earlier today I noticed that my AVG picked up a Trojan horse hiloti.cg virus located system32/svchost.exe. I tried to delete it but the virus keeps coming back on the next reboot. How does it come to my computer? What does this virus actually do? What’s the best way to get rid of it?
Trojan horse hiloti.cg is defined as Trojan Horse which has destroyed thousands of computers worldwide during the past couple of days. It is designed for corrupting computer system, delivering ads, installing other spyware and even stealing personal information from innocent computer users. Generally speaking, this virus can get into a vulnerable system via many ways. Usually it may come from corrupted websites, phishing websites and hacked legit websites or get download from spam email attachments and phishing emails. Once installed, it will carry out many evil activities:
Slow down PC performance and network speed
Permanent damage on security related services
Browser activities are interrupted frequently by tons of pop-up ads
New tabs and window are opened without your permission
Open backdoor and introduce other viruses
Change the default HOSTS file settings and redirect users to irrelevant webpages
Collect user’s online account, password information
…
Trojan horse hiloti.cg virus targets almost all Windows versions including Windows XP, Vista, Win 7, Windows 8 and Windows 10. If you keep it on the computer, it can cause immense damage to your files and system. Besides, the virus has the ability to waste enormous sum of browser resources and network traffic to furtively download potentially unwanted browser extensions onto the browser, which can possibly degrade the overall browser performance. Trojan horse hiloti.cg virus can provide remote access to hackers by compromising the entire system or stealing passwords and other sensible information. In order to safeguard your privacy and important system files from any further perilous attacks, it is suggested to take immediate actions to remove Trojan horse hiloti.cg as soon as possible.
1. It can compromise your system and may introduce additional infections like rogue software.
2. It forces you to visit websites and advertisements which are not trusted and may lead you to pay money wrongly for worthless products.
3. It takes up high resources and strikingly slows down your computer speed and even causes your computer stuck frequently.
4. It may allow cyber criminals to track your computer and steal your personal information.
From malicious drive-by-download scripts from corrupted porn and shareware / freeware websites.
Through spam email attachments, media downloads and social networks.
When clicking suspicious pop-ups or malicious links.
Open unknown email or download media files that contain the activation code of the virus.
Currently many computer users had the same experience that this virus couldn’t be removed by any anti-virus applications. So the manual approach is always required to combat this virus. And here is the step-by-step removal guide for all computer users.
1. End the malicious process from Task Manager.
Once Trojan horse hiloti.cg virus is installed, computer user may notice that CPU usage randomly jumps to 100 percent. At any time Windows always has many running processes. A process is an individual task that the computer runs. In general, the more processes, the more work the computer has to do and the slower it will run. If your system’s CPU spike is constant and remain at a constant 90-95%, users should check from Task Manager and see if there is a suspicious process occupying system resources and then end it immediately.
(The name of the virus process can be random.)
Press Ctrl+Shift+Esc to quickly bring up Task Manager Window：
2. Show hidden files and folders.
Open Folder Options by clicking the Start button, clicking Control Panel, clicking Appearance and Personalization, and then clicking Folder Options.
Click the View tab.
Under Advanced settings, click Show hidden files and folders, uncheck Hide protected operating system files (Recommended) and then click OK.
3. Open Registry entries. Find out the malicious files and entries and then delete all.
Attention: Always be sure to back up your PC before making any changes.
a. Press Windows key + R to open Run box. In the “Open” field, type “regedit” and click the “OK” button.
Then a Registry Editor window will pop up as the following picture shows:
b. Search malicious files and registry entries and then remove all of them:
%AllUsersProfile%\[random]
%AppData%\Roaming\Microsoft\Windows\Templates\[random]
%AllUsersProfile%\Application Data\.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\[random]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Temp
Trojan horse hiloti.cg is a piece of noxious Trojan virus which can badly damage the system and result in a variety of disastrous consequences. It is responsible for tracking your web surfing activities and collecting sensitive information like credit card details, bank account information, email address and password. Once infected, you will notice that CPU usage jumps to over 80% even though you have no application opened and it takes much longer than before to start up the computer or open any web sites. Also while you are browsing the web, it displays tons of ads on your web browser which promote potentially unwanted programs and rogue programs. A Trojan can be used to spy on user’s browser activities, record user’s financial data and even steal personal information. It represents a huge risk for computer security that should be deleted instantly.
Note: If you are not knowledgeable enough to be able to distinguish the location of this virus, or you are afraid of making mistake during the manual removal, please contact experts from Yoocare Online Tech Support for further help.
Published by on September 22, 2015 2:00 am, last updated on September 22, 2015 2:00 am
Leave a Reply
You must be logged in to post a comment.