HSTART.EXE – Unclassified Malware removal

HSTART.EXE size: 16792 bytes
HSTART.EXE hash: E3A8A2442BC441D5D732D42DEEB3B75D

Created files:

%TEMP%\_ir_sf_temp_0\BCD
%TEMP%\_ir_sf_temp_0\be.dll
%TEMP%\_ir_sf_temp_0\bootsect.exe
%TEMP%\_ir_sf_temp_0\dsptw.exe
%TEMP%\_ir_sf_temp_0\ghost32.exe
%TEMP%\_ir_sf_temp_0\hstart.exe
%TEMP%\_ir_sf_temp_0\NTDETECT.COM
%TEMP%\_ir_sf_temp_0\ntldr
%TEMP%\_ir_sf_temp_0\VBOOTDSK.SYS
%TEMP%\_ir_sf_temp_0\vbootedit.exe
%TEMP%\_ir_sf_temp_0\vbootedit64.exe

Detected by UnHackMe:

HSTART.EXE
Default location: %TEMP%\_IR_SF_TEMP_0\HSTART.EXE

Dropper information:
MD5: 6da91cc99181c7b51cac1b2eb0c0e1ee
File size: 4140068 bytes