Dmitry Sokolov recommends UnHackMe!

UnHackMe is a powerful tool against malware.

UnHackMe quickly removes rootkits/malware/adware/browser hijack issues!

Alex NightWatcher: Solved! (5 / 5)

Trojan.SalityStub.A also known as Virus.Win32.Sality.Gen, Win32.Sality.BL, Win32:Sality.

Malware Analysis of Trojan.SalityStub.A

Created files:

%Startup%\ufr_reports\NO_PWDS_report_20-01-2014_22-11-11-26283055-FGEI.bin
C:\autorun.inf
C:\kmqxg.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\amsint32\ImagePath: “\??\%SysDir%\drivers\oikpn.sys”
HKLM\System\CurrentControlSet\Services\amsint32\DisplayName: “amsint32”

Detected by UnHackMe:

KMQXG.EXE
Default location: C:\KMQXG.EXE

Dropper hash(md5): 31d5b6d392c66e8a0b6c2f72ee39d88c

Written by NightWatcher

Malware Hunter.
Google+

UnHackMe removes malware invisible for your antivirus!

UnHackMe is compatible with most antivirus software.
UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans and backdoors. VirusTotal (0/56).
System Requirements: Windows 2000-Windows 8.1/10. UnHackMe uses minimum of computer resources.