X1027.EXE – Unclassified Malware removal

X1027.EXE size: 2174976 bytes
X1027.EXE hash: 194998F11947479666AF57097FC1F8D7

Created files:

%SysDir%\bb
%SysDir%\bb.dll
%SysDir%\DoveSkin.DLL
%SysDir%\DoveSkin.She
%SysDir%\PassDLL.DLL
%TEMP%\x1027.exe
%TEMP%\??????????????.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\bb\Type: 10010000
HKLM\System\CurrentControlSet\Services\bb\Start: 02000000
HKLM\System\CurrentControlSet\Services\bb\DisplayName: bb
HKLM\System\CurrentControlSet\Services\bb\ImagePath: %WinDir%\System32\bb

Detected by UnHackMe:

X1027.EXE
Default location: %TEMP%\X1027.EXE

Dropper information:
MD5: 8d91a8056f83aeb83e9c40db68219611
File size: 2110179 bytes