Dmitry Sokolov recommends UnHackMe!

UnHackMe is a powerful tool against malware.

UnHackMe quickly removes rootkits/malware/adware/browser hijack issues!

Alex NightWatcher: Solved! (5 / 5)

Trojan.Crossrider1.8979 also known as Gen:Application.Heur.iv0@m8wLbtfO, a variant of Win32/Toolbar.CrossRider.CC potentially unwanted, Gen:Application.Heur.iv0@m8wLbtfO.

Malware Analysis of Trojan.Crossrider1.8979 – 016C0C3A-B99C-4AD5-BAFE-992F78912099-5.EXE

Created files:

%Appdata%\Mozilla\Firefox\Profiles\profile.default\extensions\WQNKK59573794@WAYA30227232.com\skin\update.css
%Program Files%\MediaPlayerVid2.4\016c0c3a-b99c-4ad5-bafe-992f78912099-4.exe
%Program Files%\MediaPlayerVid2.4\016c0c3a-b99c-4ad5-bafe-992f78912099-5.exe
%Program Files%\MediaPlayerVid2.4\016c0c3a-b99c-4ad5-bafe-992f78912099.xpi
%Program Files%\MediaPlayerVid2.4\Uninstall.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\MediaPlayerVid2.4\DisplayName: “MediaPlayerVid2.4”
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\MediaPlayerVid2.4\UninstallString: “%Program Files%\MediaPlayerVid2.4\Uninstall.exe /fcp=1 ”

Detected by UnHackMe:

016C0C3A-B99C-4AD5-BAFE-992F78912099-5.EXE
Default location: %PROGRAM FILES%\MEDIAPLAYERVID2.4\016C0C3A-B99C-4AD5-BAFE-992F78912099-5.EXE

Dropper hash(md5): 4e884d6bf1dcbcfc5b1107b8492a1ba1

Written by NightWatcher

Malware Hunter.
Google+

UnHackMe removes malware invisible for your antivirus!

UnHackMe is compatible with most antivirus software.
UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans and backdoors. VirusTotal (0/56).
System Requirements: Windows 2000-Windows 8.1/10. UnHackMe uses minimum of computer resources.