Solved! Use WEBCAM_PLUGIN.EXE (Trojan Delf) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

WEBCAM_PLUGIN.EXE – Trojan Delf removal

File MD5 Virus Alias
WEBCAM_PLUGIN.EXE c5caffc628a4ab44748162e9a6d02541 Trojan Delf
WEBCAM_PLUGIN.EXE c5caffc628a4ab44748162e9a6d02541 Trojan Eldorado
WEBCAM_PLUGIN.EXE c5caffc628a4ab44748162e9a6d02541 Trojan Downloader
WEBCAM_PLUGIN.EXE c5caffc628a4ab44748162e9a6d02541 Trojan Agent
WEBCAM_PLUGIN.EXE c5caffc628a4ab44748162e9a6d02541 Trojan Small
WEBCAM_PLUGIN.EXE c5caffc628a4ab44748162e9a6d02541 Trojan Crypt

WEBCAM_PLUGIN.EXE size: 91008 bytes
WEBCAM_PLUGIN.EXE hash: C5CAFFC628A4AB44748162E9A6D02541

Created files:

%Program Files Common%\webcam_plugin.exe
%Program Files%\Internet Explorer\iservices\efinderdy.exe
%Temp%\A27A2.dmp

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\IExploreupdate: %Program Files%\Internet Explorer\iservices\efinderdy.exe

Detected by UnHackMe:

WEBCAM_PLUGIN.EXE
Default location: %PROGRAM FILES COMMON%\WEBCAM_PLUGIN.EXE

Dropper information:
MD5: 74401f610a5380e9d9df0c1555c98ad0
File size: 90691 bytes

Leave a Reply