I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Free Download Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.
TXICRELECU.SYS – Trojan Downloader removal
| File | MD5 | Virus Alias |
|---|---|---|
| TXICRELECU.SYS | e5b6015c4a322f136b69918ba1474e7b | Trojan Downloader |
| TXICRELECU.SYS | e5b6015c4a322f136b69918ba1474e7b | Trojan Artemis |
| TXICRELECU.SYS | e5b6015c4a322f136b69918ba1474e7b | Trojan Generic |
| TXICRELECU.SYS | e5b6015c4a322f136b69918ba1474e7b | Trojan CI |
| TXICRELECU.SYS | e5b6015c4a322f136b69918ba1474e7b | Trojan Agent |
TXICRELECU.SYS size: 11520 bytes
TXICRELECU.SYS hash: E5B6015C4A322F136B69918BA1474E7B
Created files:
C:\Program files\ERwin\hybrid.org
C:\Program files\ERwin\hybridapp.exe
C:\Program files\ERwin\loadhybrid.exe
C:\Program files\ERwin\TXiCreLEcU.org
C:\Program files\ERwin\TXiCreLEcU.sys
%TEMP%\toastpop.exe
%TEMP%\toastpop_vnr.exe
%AppData%\Microsoft\Crypto\RSA\S-1-5-21-515967899-854245398-1708537768-1003\f58155b4b1d5a524ca0261c3ee99fb50_78de4566-a5cc-4192-bf8d-014e0d2bd235
Autostart registry keys:
HKLM\System\CurrentControlSet\Services\TXiCreLEcU\Type: 01000000
HKLM\System\CurrentControlSet\Services\TXiCreLEcU\Start: 03000000
HKLM\System\CurrentControlSet\Services\TXiCreLEcU\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\TXiCreLEcU\DisplayName: TXiCreLEcU
HKLM\System\CurrentControlSet\Services\TXiCreLEcU\ImagePath: C:\Program files\ERwin\TXiCreLEcU.sys
Detected by UnHackMe:
TXICRELECU.SYS
Default location: %PROGRAM FILES%\ERWIN\TXICRELECU.SYS
Dropper information:
MD5: d8c82c0c08ef3f97dcc8350a61f77b83
File size: 1354038 bytes