Item: BehavesLike.Win32.Comame.fcMalwarefixit
Rating: 5
Author: Alex

Dmitry Sokolov recommends UnHackMe!

UnHackMe is a powerful tool against malware.

UnHackMe quickly removes rootkits/malware/adware/browser hijack issues!

Alex NightWatcher: Solved! (5 / 5)

BehavesLike.Win32.Comame.fc also known as Worm/Generic.DJV, Worm.Win32.Agent.CP, QVM20.1.Malware.Gen.

Malware Analysis of BehavesLike.Win32.Comame.fc – SPANISH ACTION GIRLS ASH (JENNA,SANDY).AVI.EXE

Created files:

%Program Files%\Far Manager\Plugins\TmpPanel\indian xxx handjob girls lady (Sonja).zip.exe
%Program Files%\GUMB.tmp\african trambling trambling uncut .mpg.exe
%Program Files%\GUMD.tmp\spanish action girls ash (Jenna,Sandy).avi.exe
%Program Files%\Microsoft Office\Templates\swedish blowjob big vagina .avi.exe
%Program Files%\Movie Maker\Shared\beast [milf] feet young .avi.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\mssrv32: 43 3A 5C 57 49 4E 44 4F 57 53 5C 6D 73 73 72 76 2E 65 78 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 72 14 00 00 00 00 00 08 00 00 00 AE 2C 91 7C 00 00 00 00 51 2D 91 7C 58 2D 91 7C 60 00 00 00 08 02 00 00 50 72 14 00 68 01 14 00 00 00 00 00 00 00 00 00 50 72 14 00 40 00 00 00 58 72 14 00 79 79 79 79 78 01 14 00 00 00 14 00 01 00 00 00 00 00 14 00 69 75 12 00 79 00 00 00 B0 79 12 00 10 00 01 00 41 00 00 00 64 75 12 00 00 00 00 00 B0 79 12 00 00 65 3F 7C 40 00 91 7C 79 79 79 79 3D 00 91 7C 3F 04 91 7C 00 00 14 00 00 00 00 00 65 4D 14 00 44 75 12 00 62 04 91 7C 65 4D 14 00 31 00 00 00 68 75 12 00 0C B6 88 7C 60 75 12 00 0F 41 40 00 94 79 12 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 79 12 00 61 1A 40 00

Detected by UnHackMe:

SPANISH ACTION GIRLS ASH (JENNA,SANDY).AVI.EXE
Default location: %PROGRAM FILES%\GUMD.TMP\SPANISH ACTION GIRLS ASH (JENNA,SANDY).AVI.EXE

Dropper hash(md5): d808f6208a31623a8531ba0912710c90

Written by NightWatcher

Malware Hunter.
Google+

UnHackMe removes malware invisible for your antivirus!

UnHackMe is compatible with most antivirus software.
UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans and backdoors. VirusTotal (0/56).
System Requirements: Windows 2000-Windows 8.1/10. UnHackMe uses minimum of computer resources.