Dmitry Sokolov recommends UnHackMe!

UnHackMe is a powerful tool against malware.

UnHackMe quickly removes rootkits/malware/adware/browser hijack issues!

Alex NightWatcher: Solved! (5 / 5)

Win32.Trojan.Staser.Dzki also known as Win32/Spy.Delf.PKE, Trojan.Win32.Staser.djalum, Gen:Variant.Zusy.58286.

Malware Analysis of Win32.Trojan.Staser.Dzki – DAODOM.EXE

Created files:

%Common Appdata%\systemskey.ini
C:\Documents and Settings\LocalService\Application Data\ffifssssfdfsf4f.ini
%WinDir%\Installer\1a3a1.msi
%WinDir%\daodom.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\daodom\ImagePath: “%WinDir%\daodom.exe”
HKLM\System\CurrentControlSet\Services\daodom\DisplayName: “daodom2”

Detected by UnHackMe:

DAODOM.EXE
Default location: %WinDir%\DAODOM.EXE

Dropper hash(md5): 15c88af7dedbccc6ebd522028d43db2d

Written by NightWatcher

Malware Hunter.
Google+

UnHackMe removes malware invisible for your antivirus!

UnHackMe is compatible with most antivirus software.
UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans and backdoors. VirusTotal (0/56).
System Requirements: Windows 2000-Windows 8.1/10. UnHackMe uses minimum of computer resources.