Hyborate is a trojan that deletes user video files and text documents. Once executed, the parasite displays fake error message and installs itself to the system. Then it runs a payload. Hyborate searches all local hard drives for video and PDF files, and deletes all the files it finds. It also changes numerous Windows Explorer and Internet Explorer settings, disables the Registry Editor, hides certain system utilities. The trojan changes Windows registration details and lowers system security settings. It also terminates essential system tools such as the Command Prompt and the Task Manager. Hyborate runs on every Windows startup and every time the user opens a text file.