Dmitry Sokolov recommends UnHackMe!

UnHackMe is a powerful tool against malware.

UnHackMe quickly removes rootkits/malware/adware/browser hijack issues!

Alex NightWatcher: Solved! (5 / 5)

PUP/Win32.PostTip also known as Adware ( 004a7d2b1 ), Win32.Trojan.Falsesign.Hryu, nbiz (PUA).

Malware Analysis of PUP/Win32.PostTip – IPU1010.EXE

Created files:

%Program Files%\PostTip\PostTip.exe
%Program Files%\PostTip\uninstall.exe
%TEMP%\IPU1010.EXE
%TEMP%\UPDAT.XXX
%APPDATA%\MICROSOFT\PROTECT\S-1-5-21-2250177403-3231077850-1239169437-1002\015F9EB8-4301-4F44-A6BE-352F251F5D6E

Autostart registry keys:

HKLM\Software\Classes\CLSID\{C4BF6897-41A2-454b-AC3B-437F30BEA671}\InprocServer32\: “%Program Files%\PostTip\PostTip.dll”
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\PostTip: “%Program Files%\PostTip\PostTip.exe”
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\PostTip\UninstallString: “%Program Files%\PostTip\Uninstall.exe”
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\PostTip\DisplayName: “PostTip”

Detected by UnHackMe:

IPU1010.EXE
DEFAULT LOCATION: %TEMP%\IPU1010.EXE

Dropper hash(md5): 010c349699e55d3d5f616b50acf88ef5

Written by NightWatcher

Malware Hunter.
Google+

UnHackMe removes malware invisible for your antivirus!

UnHackMe is compatible with most antivirus software.
UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans and backdoors. VirusTotal (0/56).
System Requirements: Windows 2000-Windows 8.1/10. UnHackMe uses minimum of computer resources.