Solved! Use WATERMARKMGR.EXE (Virus Sality) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

WATERMARKMGR.EXE – Virus Sality removal

File MD5 Virus Alias
WATERMARKMGR.EXE 8c668c57fc827bde8cb462ce4d576663 Virus Sality
WATERMARKMGR.EXE 8c668c57fc827bde8cb462ce4d576663 Trojan, Suspicious File

WATERMARKMGR.EXE size: 176128 bytes
WATERMARKMGR.EXE hash: 8C668C57FC827BDE8CB462CE4D576663

Created files:

%Program Files%\Microsoft\WaterMark.exe
%Program Files%\Microsoft\WaterMarkmgr.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit: c:\windows\System32\userinit.exe,,c:\program files\Microsoft\watermark.exe

Detected by UnHackMe:

WATERMARKMGR.EXE
Default location: %PROGRAM FILES%\MICROSOFT\WATERMARKMGR.EXE

Dropper information:
MD5: 6c5ee22f200421533e400426e3ca0f70
File size: 355291 bytes

Leave a Reply