Dmitry Sokolov recommends UnHackMe!

UnHackMe is a powerful tool against malware.

UnHackMe quickly removes rootkits/malware/adware/browser hijack issues!

Alex NightWatcher: Solved! (5 / 5)

ADWARE/BHO.BO also known as MultiPlug (PUA), Riskware:W32/Diplugem, W32/A-6f91b072!Eldorado.

Malware Analysis of ADWARE/BHO.BO – K46K7NB.DLL

Created files:

%Program Files%\Google\Chrome\Temp\source1628_10808\chrome_patch.diff
%COMMON APPDATA%\DOWNLOAD KEEEPER\K46K7NB.DAT
%COMMON APPDATA%\DOWNLOAD KEEEPER\K46K7NB.DLL
%COMMON APPDATA%\DOWNLOAD KEEEPER\K46K7NB.TLB
%COMMON APPDATA%\DOWNLOAD KEEEPER\NRTLWZF5.DAT

Autostart registry keys:

HKLM\SOFTWARE\CLASSES\CLSID\{EB7292CB-D76E-3262-4BAD-9F79BAD1A85C}\INPROCSERVER32\: “%COMMON APPDATA%\DOWNLOAD KEEEPER\K46K7NB.DLL”
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{C1A27135-69EB-8D44-7358-34727DD7B820}\UNINSTALLSTRING: “”%COMMON APPDATA%\DOWNLOAD KEEEPER\NRTLWZF5.EXE” /S /N /I:”EXECUTECOMMANDS;UNINSTALLCOMMANDS” “””
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C1A27135-69EB-8D44-7358-34727DD7B820}\DisplayName: “Download keeeper”

Detected by UnHackMe:

K46K7NB.DLL
DEFAULT LOCATION: %COMMON APPDATA%\DOWNLOAD KEEEPER\K46K7NB.DLL

Dropper hash(md5): 0c7d9bdaaf41af54ca7dc14019159688

Written by NightWatcher

Malware Hunter.
Google+

UnHackMe removes malware invisible for your antivirus!

UnHackMe is compatible with most antivirus software.
UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans and backdoors. VirusTotal (0/56).
System Requirements: Windows 2000-Windows 8.1/10. UnHackMe uses minimum of computer resources.