Solved! Use WATERMARK.EXE (Worm AMN) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

WATERMARK.EXE – Worm AMN removal

File MD5 Virus Alias
WATERMARK.EXE 1c8f503ec0fc2b0eeac52f7f32058b60 Worm AMN
WATERMARK.EXE 1c8f503ec0fc2b0eeac52f7f32058b60 Trojan SuspiciousFile
WATERMARK.EXE 1c8f503ec0fc2b0eeac52f7f32058b60 Trojan Malware.Obscu
WATERMARK.EXE 1c8f503ec0fc2b0eeac52f7f32058b60 Trojan Generic
WATERMARK.EXE 1c8f503ec0fc2b0eeac52f7f32058b60 Trojan Eldorado
WATERMARK.EXE 1c8f503ec0fc2b0eeac52f7f32058b60 Trojan Kazy

WATERMARK.EXE size: 159173 bytes
WATERMARK.EXE hash: 1C8F503EC0FC2B0EEAC52F7F32058B60

Created files:

%Program Files%\Microsoft\WaterMark.exe
%Common AppData%\Apple Computer\Installer Cache\Safari 5.34.52.7\SetupAdmin.exe
%Local AppData%\Google\Chrome\Application\17.0.963.56\avcodec-53.dll
%Local AppData%\Google\Chrome\Application\17.0.963.56\avformat-53.dll
%Local AppData%\Google\Chrome\Application\17.0.963.56\avutil-51.dll

Autostart registry keys:

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit: c:\windows\System32\userinit.exe,,c:\program files\Microsoft\watermark.exe

Detected by UnHackMe:

WATERMARK.EXE
Default location: %PROGRAM FILES%\MICROSOFT\WATERMARK.EXE

Dropper information:
MD5: 1c8f503ec0fc2b0eeac52f7f32058b60
File size: 159173 bytes

Leave a Reply