I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Free Download Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.
DUNDAS.CHART.FOR.REPORTING.SERVICES.2005.V3.1.0.254.RETAIL.INCL.KEYMAKER-ZWT.EXE – Unknown removal
DUNDAS.CHART.FOR.REPORTING.SERVICES.2005.V3.1.0.254.RETAIL.INCL.KEYMAKER-ZWT.EXE size: 24185615 bytes
DUNDAS.CHART.FOR.REPORTING.SERVICES.2005.V3.1.0.254.RETAIL.INCL.KEYMAKER-ZWT.EXE hash: C5A6AB45871BC72C03E23501FD30E981
Created files:
%Program Files%\Pyqed\Emcwk\Gdpo.dll
%Program Files%\Pyqed\Jiws.exe
%Program Files%\Pyqed\Onteh.exe
%TEMP%\g855\Dundas.Chart.for.Reporting.Services.2005.v3.1.0.254.Retail.Incl.Keymaker-ZWT.exe
Autostart registry keys:
HKLM\System\CurrentControlSet\Services\OALX\Start: 02000000
HKLM\System\CurrentControlSet\Services\OALX\Type: 10000000
HKLM\System\CurrentControlSet\Services\OALX\Description: Data Online Transaction Processing Module
HKLM\System\CurrentControlSet\Services\OALX\DisplayName: Data Online Transaction Processing Module
HKLM\System\CurrentControlSet\Services\OALX\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\OALX\Group: TDI
HKLM\System\CurrentControlSet\Services\OALX\ObjectName: LocalSystem
HKLM\System\CurrentControlSet\Services\OALX\ImagePath: %Program Files%\Pyqed\Onteh.exe
Detected by UnHackMe:
DUNDAS.CHART.FOR.REPORTING.SERVICES.2005.V3.1.0.254.RETAIL.INCL.KEYMAKER-ZWT.EXE
Default location: %TEMP%\G855\DUNDAS.CHART.FOR.REPORTING.SERVICES.2005.V3.1.0.254.RETAIL.INCL.KEYMAKER-ZWT.EXE
Dropper information:
MD5: 34e5bb51ac36b2db65852b163ffa279e
File size: 26130601 bytes