WT74.EXE – Unknown removal

WT74.EXE size: 1032192 bytes
WT74.EXE hash: 87FBB60877FAA40218AA07B80645343A

Created files:

%Program Files%\MSN Gaming Zone\Windows\bckgzm.exe
%Program Files%\MSN Gaming Zone\Windows\chkrzm.exe
%Program Files%\NetMeeting\conf.hlk
%Program Files%\Ppu71.exe
%SysDir%\Winkekt.exe
%TEMP%\Ov72.exe
%TEMP%\Vk73.exe
%TEMP%\Wt74.exe
\\VBOXSVR\in\kitty.bak.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\Winkekt\Type: 10010000
HKLM\System\CurrentControlSet\Services\Winkekt\Start: 02000000
HKLM\System\CurrentControlSet\Services\Winkekt\DisplayName: Winkekt
HKLM\System\CurrentControlSet\Services\Winkekt\ImagePath: %WinDir%\System32\Winkekt.exe
HKLM\System\CurrentControlSet\Services\WW7iq\Type: 10010000
HKLM\System\CurrentControlSet\Services\WW7iq\Start: 03000000
HKLM\System\CurrentControlSet\Services\WW7iq\DisplayName: WW7iq
HKLM\System\CurrentControlSet\Services\WW7iq\ImagePath: \\VBOXSVR\in\kitty.bak.exe

Detected by UnHackMe:

WT74.EXE
Default location: %TEMP%\WT74.EXE

Dropper information:
MD5: 0d19af02629ed8cbfe201d20c403ce4f
File size: 89538 bytes