THUNDERFW.EXE.SVN-BASE – Unclassified Malware removal

THUNDERFW.EXE.SVN-BASE size: 73160 bytes
THUNDERFW.EXE.SVN-BASE hash: F0372FF8A6148498B19E04203DBB9E69

Created files:

%Program Files%\SogouSoftware\crash\.svn\all-wcprops
%Program Files%\SogouSoftware\crash\.svn\entries
%Program Files%\SogouSoftware\crash\.svn\format
%Program Files%\SogouSoftware\crash\.svn\prop-base\ExceptionReport.exe.svn-base
%Program Files%\SogouSoftware\crash\.svn\text-base\ExceptionReport.exe.svn-base
%Program Files%\SogouSoftware\crash\ExceptionReport.exe
%Program Files%\SogouSoftware\download\download\.svn\all-wcprops
%Program Files%\SogouSoftware\download\download\.svn\entries
%Program Files%\SogouSoftware\download\download\.svn\format
%Program Files%\SogouSoftware\download\download\.svn\prop-base\atl71.dll.svn-base
%Program Files%\SogouSoftware\download\download\.svn\prop-base\dl_peer_id.dll.svn-base
%Program Files%\SogouSoftware\download\download\.svn\prop-base\download_engine.dll.svn-base
%Program Files%\SogouSoftware\download\download\.svn\prop-base\MiniThunderPlatform.exe.svn-base
%Program Files%\SogouSoftware\download\download\.svn\prop-base\MiniTPFw.exe.svn-base
%Program Files%\SogouSoftware\download\download\.svn\prop-base\msvcp71.dll.svn-base
%Program Files%\SogouSoftware\download\download\.svn\prop-base\msvcr71.dll.svn-base
%Program Files%\SogouSoftware\download\download\.svn\prop-base\ThunderFW.exe.svn-base
%Program Files%\SogouSoftware\download\download\.svn\prop-base\zlib1.dll.svn-base
%Program Files%\SogouSoftware\download\download\.svn\text-base\atl71.dll.svn-base
%Program Files%\SogouSoftware\download\download\.svn\text-base\dl_peer_id.dll.svn-base
%Program Files%\SogouSoftware\download\download\.svn\text-base\download_engine.dll.svn-base
%Program Files%\SogouSoftware\download\download\.svn\text-base\id.dat.svn-base
%Program Files%\SogouSoftware\download\download\.svn\text-base\MiniThunderPlatform.exe.svn-base
%Program Files%\SogouSoftware\download\download\.svn\text-base\MiniTPFw.exe.svn-base
%Program Files%\SogouSoftware\download\download\.svn\text-base\msvcp71.dll.svn-base
%Program Files%\SogouSoftware\download\download\.svn\text-base\msvcr71.dll.svn-base
%Program Files%\SogouSoftware\download\download\.svn\text-base\ThunderFW.exe.svn-base
%Program Files%\SogouSoftware\download\download\.svn\text-base\zlib1.dll.svn-base
%Program Files%\SogouSoftware\download\download\atl71.dll
%Program Files%\SogouSoftware\download\download\dl_peer_id.dll
%Program Files%\SogouSoftware\download\download\download_engine.dll
%Program Files%\SogouSoftware\download\download\MiniThunderPlatform.exe
%Program Files%\SogouSoftware\download\download\MiniTPFw.exe
%Program Files%\SogouSoftware\download\download\msvcp71.dll
%Program Files%\SogouSoftware\download\download\msvcr71.dll
%Program Files%\SogouSoftware\download\download\ThunderFW.exe
%Program Files%\SogouSoftware\download\download\zlib1.dll
%Program Files%\SogouSoftware\download\xldl.dll
%Program Files%\SogouSoftware\SogouSoftware.exe
%Program Files%\SogouSoftware\SogouSoftwareLoader.dll
%Temp%\minidownload.exe

Detected by UnHackMe:

THUNDERFW.EXE.SVN-BASE
Default location: %PROGRAM FILES%\SOGOUSOFTWARE\DOWNLOAD\DOWNLOAD\.SVN\TEXT-BASE\THUNDERFW.EXE.SVN-BASE

Dropper information:
MD5: 2cc80fb8af4c2c782d651ad1e1fb93bd
File size: 2383432 bytes