Dmitry Sokolov recommends UnHackMe!

UnHackMe is a powerful tool against malware.

UnHackMe quickly removes rootkits/malware/adware/browser hijack issues!

Alex NightWatcher: Solved! (5 / 5)

Malware Analysis of HW32.Packed.E0AE – BASS_APE.DLL

Created files:

%Program Files%\AIMP3\Plugins\bass_ac3.dll
%Program Files%\AIMP3\Plugins\bass_alac.dll
%Program Files%\AIMP3\Plugins\bass_ape.dll
%Program Files%\AIMP3\Plugins\bass_flac.dll
%Program Files%\AIMP3\Plugins\bass_midi.dll

Autostart registry keys:

HKLM\Software\Classes\CLSID\{0041494D-5033-4472-6F70-546172676574}\LocalServer32\: “C:\PROGRA~1\AIMP3\AIMP3.exe”
HKLM\Software\Classes\CLSID\{1F77B17B-F531-44DB-ACA4-76ABB5010A28}\InprocServer32\: “%Program Files%\AIMP3\Modules\aimp_menu32.dll”
HKLM\Software\Classes\AIMP.AssocFile.AAC\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.AC3\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.ACS2\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.ACS3\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.AIMPPL\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.APE\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.ASX\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.CDA\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.CUE\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.FLA\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.FLAC\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.IT\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.KAR\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.M3U\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.M3U8\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.M4A\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.M4B\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.MAC\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.MID\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.MIDI\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.MO3\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.MOD\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.MP+\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.MP1\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.MP2\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.MP3\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.MPC\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.MPGA\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.MTM\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.OFR\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.OFS\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.OGA\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.OGG\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.OPUS\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.PLS\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.RMI\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.S3M\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.SPX\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.TAK\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.TTA\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.UMX\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.WAV\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.WAX\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.WMA\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.WV\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.XM\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Classes\AIMP.AssocFile.XSPF\shell\open\command\: “”%Program Files%\AIMP3\AIMP3.exe” “%1″”
HKLM\Software\Clients\Media\AIMP\shell\open\command\: “%Program Files%\AIMP3\AIMP3.exe”
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\AIMP3\DisplayName: “AIMP3”
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\AIMP3\UninstallString: “%Program Files%\AIMP3\Uninstall.exe”

Detected by UnHackMe:

BASS_APE.DLL
Default location: %PROGRAM FILES%\AIMP3\PLUGINS\BASS_APE.DLL

Dropper hash(md5): 292928437d0398a46206d8e0a5f8f651

Written by NightWatcher

Malware Hunter.
Google+

UnHackMe removes malware invisible for your antivirus!

UnHackMe is compatible with most antivirus software.
UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans and backdoors. VirusTotal (0/56).
System Requirements: Windows 2000-Windows 8.1/10. UnHackMe uses minimum of computer resources.