I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Free Download Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.
LOADHYBRID.EXE – Trojan Downloader removal
| File | MD5 | Virus Alias |
|---|---|---|
| LOADHYBRID.EXE | df974e8c023b4e617c94089bffc81ee1 | Trojan Downloader |
| LOADHYBRID.EXE | df974e8c023b4e617c94089bffc81ee1 | Virus Part |
| LOADHYBRID.EXE | df974e8c023b4e617c94089bffc81ee1 | Trojan Delf |
LOADHYBRID.EXE size: 14336 bytes
LOADHYBRID.EXE hash: DF974E8C023B4E617C94089BFFC81EE1
Created files:
C:\Program files\ERwin\hybrid.org
C:\Program files\ERwin\hybridapp.exe
C:\Program files\ERwin\loadhybrid.exe
C:\Program files\ERwin\TXiCreLEcU.org
C:\Program files\ERwin\TXiCreLEcU.sys
%TEMP%\toastpop.exe
%TEMP%\toastpop_vnr.exe
%AppData%\Microsoft\Crypto\RSA\S-1-5-21-515967899-854245398-1708537768-1003\f58155b4b1d5a524ca0261c3ee99fb50_78de4566-a5cc-4192-bf8d-014e0d2bd235
Autostart registry keys:
HKLM\System\CurrentControlSet\Services\TXiCreLEcU\Type: 01000000
HKLM\System\CurrentControlSet\Services\TXiCreLEcU\Start: 03000000
HKLM\System\CurrentControlSet\Services\TXiCreLEcU\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\TXiCreLEcU\DisplayName: TXiCreLEcU
HKLM\System\CurrentControlSet\Services\TXiCreLEcU\ImagePath: C:\Program files\ERwin\TXiCreLEcU.sys
Detected by UnHackMe:
LOADHYBRID.EXE
Default location: %PROGRAM FILES%\ERWIN\LOADHYBRID.EXE
Dropper information:
MD5: d8c82c0c08ef3f97dcc8350a61f77b83
File size: 1354038 bytes