SWFPLAYER.EXE – Unclassified Malware removal

SWFPLAYER.EXE size: 1609732 bytes
SWFPLAYER.EXE hash: C0D0F25BB2BCC23B2E1579633E698B99

Created files:

%AppData%\elefundesktops\watermillbywaterfall_screensaver\disable_preview_sound
%AppData%\elefundesktops\watermillbywaterfall_screensaver\disable_product_sound
%AppData%\elefundesktops\watermillbywaterfall_screensaver\empty
%AppData%\elefundesktops\watermillbywaterfall_screensaver\enable_product_sound
%AppData%\elefundesktops\watermillbywaterfall_screensaver\flash.exe
%AppData%\elefundesktops\watermillbywaterfall_screensaver\Flash9b.ocx
%AppData%\elefundesktops\watermillbywaterfall_screensaver\install
%AppData%\elefundesktops\watermillbywaterfall_screensaver\product
%AppData%\elefundesktops\watermillbywaterfall_screensaver\screensavercontoller.dll
%AppData%\elefundesktops\watermillbywaterfall_screensaver\screensaver_preview
%AppData%\elefundesktops\watermillbywaterfall_screensaver\settings
%AppData%\elefundesktops\watermillbywaterfall_screensaver\splash
%AppData%\elefundesktops\watermillbywaterfall_screensaver\swfplayer.exe
%AppData%\elefundesktops\watermillbywaterfall_screensaver\sysinfo.exe
%AppData%\elefundesktops\watermillbywaterfall_screensaver\uninstall
%AppData%\elefundesktops\watermillbywaterfall_screensaver\uninstall.exe
%AppData%\elefundesktops\watermillbywaterfall_screensaver\Watermill by Waterfall.scr
%AppData%\elefundesktops\watermillbywaterfall_screensaver\Watermill by Waterfall_installer.exe
%SysDir%\Flash9b.ocx

Detected by UnHackMe:

SWFPLAYER.EXE
Default location: %APPDATA%\ELEFUNDESKTOPS\WATERMILLBYWATERFALL_SCREENSAVER\SWFPLAYER.EXE

Dropper information:
MD5: 687565a902f5de688a884f1d9dbdea0b
File size: 6172976 bytes