I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Free Download Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.
TOASTPOP.EXE – Trojan Meredrop removal
| File | MD5 | Virus Alias |
|---|---|---|
| TOASTPOP.EXE | 31c8181f3fa5902ac533419ed230e9e1 | Trojan Meredrop |
| TOASTPOP.EXE | 31c8181f3fa5902ac533419ed230e9e1 | Suspicious File |
| TOASTPOP.EXE | 31c8181f3fa5902ac533419ed230e9e1 | Trojan Genome |
| TOASTPOP.EXE | 31c8181f3fa5902ac533419ed230e9e1 | Trojan Hllw |
| TOASTPOP.EXE | 31c8181f3fa5902ac533419ed230e9e1 | Trojan CI |
| TOASTPOP.EXE | 31c8181f3fa5902ac533419ed230e9e1 | Worm Autorun |
TOASTPOP.EXE size: 299008 bytes
TOASTPOP.EXE hash: 31C8181F3FA5902AC533419ED230E9E1
Created files:
C:\Program files\ERwin\hybrid.org
C:\Program files\ERwin\hybridapp.exe
C:\Program files\ERwin\loadhybrid.exe
C:\Program files\ERwin\TXiCreLEcU.org
C:\Program files\ERwin\TXiCreLEcU.sys
%TEMP%\toastpop.exe
%TEMP%\toastpop_vnr.exe
%AppData%\Microsoft\Crypto\RSA\S-1-5-21-515967899-854245398-1708537768-1003\f58155b4b1d5a524ca0261c3ee99fb50_78de4566-a5cc-4192-bf8d-014e0d2bd235
Autostart registry keys:
HKLM\System\CurrentControlSet\Services\TXiCreLEcU\Type: 01000000
HKLM\System\CurrentControlSet\Services\TXiCreLEcU\Start: 03000000
HKLM\System\CurrentControlSet\Services\TXiCreLEcU\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\TXiCreLEcU\DisplayName: TXiCreLEcU
HKLM\System\CurrentControlSet\Services\TXiCreLEcU\ImagePath: C:\Program files\ERwin\TXiCreLEcU.sys
Detected by UnHackMe:
TOASTPOP.EXE
Default location: %TEMP%\TOASTPOP.EXE
Dropper information:
MD5: d8c82c0c08ef3f97dcc8350a61f77b83
File size: 1354038 bytes