Solved! Use RINST.EXE (Backdoor Hupigon) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

RINST.EXE – Backdoor Hupigon removal

File MD5 Virus Alias
RINST.EXE ff87ece988790d7e774b21b7287f7f18 Backdoor Hupigon
RINST.EXE ff87ece988790d7e774b21b7287f7f18 Virus Sality

RINST.EXE size: 1197568 bytes
RINST.EXE hash: FF87ECE988790D7E774B21B7287F7F18

Created files:

%SysDir%\1033\dwintl.dll
%SysDir%\12520437.cpx
%SysDir%\12520850.cpx
%SysDir%\6to4svc.dll
%SysDir%\bpk.exe
%SysDir%\bpkhk.dll
%SysDir%\bpkwb.dll
%SysDir%\pk.bin
%SysDir%\rinst.exe
%Temp%\photos.docx
%Temp%\RarSFX0\bpk.exe
%Temp%\RarSFX0\bpkhk.dll
%Temp%\RarSFX0\bpkwb.dll
%Temp%\RarSFX0\photos.docx
%Temp%\RarSFX0\pk.bin
%Temp%\RarSFX0\rinst.exe

Detected by UnHackMe:

RINST.EXE
Default location: %SYSDIR%\RINST.EXE

Dropper information:
MD5: 0a16977ad2d995813fcd5e64d7976b27
File size: 2490091 bytes

Leave a Reply