Dmitry Sokolov recommends UnHackMe!

UnHackMe is a powerful tool against malware.

UnHackMe quickly removes rootkits/malware/adware/browser hijack issues!

Alex NightWatcher: Solved! (5 / 5)

Virus ( f10001071 ) also known as Win32/Kashu.E, W32/Sality.gen, Virus.Win32.Sality.at (v).

Malware Analysis of Virus ( f10001071 )

Created files:

%Temp%\mediaget-installer-tmp\preinstall.template
%Temp%\mediaget-installer-tmp\stub.html
%Temp%\tor-browser-bundle-2325-8_id1551880ids1s.exe
%Startup%\31d5b6d392c66e8a0b6c2f72ee39d88c.exe
%Startup%\ufr_reports\NO_PWDS_report_20-01-2014_22-11-11-26283055-FGEI.bin

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\amsint32\ImagePath: “\??\%SysDir%\drivers\oikpn.sys”
HKLM\System\CurrentControlSet\Services\amsint32\DisplayName: “amsint32”

Detected by UnHackMe:

TOR-BROWSER-BUNDLE-2325-8_ID1551880IDS1S.EXE
Default location: %TEMP%\TOR-BROWSER-BUNDLE-2325-8_ID1551880IDS1S.EXE

Dropper hash(md5): 31d5b6d392c66e8a0b6c2f72ee39d88c

Written by NightWatcher

Malware Hunter.
Google+

UnHackMe removes malware invisible for your antivirus!

UnHackMe is compatible with most antivirus software.
UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans and backdoors. VirusTotal (0/56).
System Requirements: Windows 2000-Windows 8.1/10. UnHackMe uses minimum of computer resources.