Dmitry Sokolov recommends UnHackMe!

UnHackMe is a powerful tool against malware.

UnHackMe quickly removes rootkits/malware/adware/browser hijack issues!

Alex NightWatcher: Solved! (5 / 5)

worm.win32.secrar.a also known as Ransom.Locky, Trojan.Win32.S.Ransom.409449[h], Trojan.Generic.D3A0238.

Malware Analysis of worm.win32.secrar.a – UQPFAGAV.EXE

Created files:

%TEMP%\SHLGUID.H
%TEMP%\_HASHLIB.PY
%WINDIR%\UQPFAGAV.EXE

Autostart registry keys:

HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\AQEJEFIS: “”%WINDIR%\UQPFAGAV.EXE””

Detected by UnHackMe:

UQPFAGAV.EXE
Default location: %WinDir%\UQPFAGAV.EXE

Dropper hash(md5): 6ea4c6c598985d88e73afd56b22e7dc8

Written by NightWatcher

Malware Hunter.
Google+

UnHackMe removes malware invisible for your antivirus!

UnHackMe is compatible with most antivirus software.
UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans and backdoors. VirusTotal (0/56).
System Requirements: Windows 2000-Windows 8.1/10. UnHackMe uses minimum of computer resources.