Dmitry Sokolov recommends UnHackMe!

UnHackMe is a powerful tool against malware.

UnHackMe quickly removes rootkits/malware/adware/browser hijack issues!

Alex NightWatcher: Solved! (5 / 5)

Backdoor.Zegost.fp also known as BackDoor.Generic_r.NOX, TrojWare.Win32.Farfli.BVB, TR/Dropper.Gen.

Malware Analysis of Backdoor.Zegost.fp – 28015XXX.EXE

Created files:

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\LUIIOHEM\desktop.ini
%SysDir%\48.dll
%Temp%\28015xxx.exe
%Temp%\28015xxx.exe3
%Temp%\83421xxx.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\ApplyDisk\ImagePath: “\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\sy6dbdk.sys”
HKLM\System\CurrentControlSet\Services\ApplyDisk\DisplayName: “ApplyDisk”
HKLM\System\CurrentControlSet\Services\gpao20guamka\ImagePath: “%SystemRoot%\System32\svchost.exe -k “gpao20guamka””
HKLM\System\CurrentControlSet\Services\gpao20guamka\DisplayName: “pguadalk20qdaz”

Detected by UnHackMe:

28015XXX.EXE
Default location: %TEMP%\28015XXX.EXE

Dropper hash(md5): 15073bd81219456acfbdd6cd211bf6d2

Written by NightWatcher

Malware Hunter.
Google+

UnHackMe removes malware invisible for your antivirus!

UnHackMe is compatible with most antivirus software.
UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans and backdoors. VirusTotal (0/56).
System Requirements: Windows 2000-Windows 8.1/10. UnHackMe uses minimum of computer resources.