OFFICEXP KEYGEN.EXE – Trojan Delphi removal

OFFICEXP KEYGEN.EXE size: 76098 bytes
OFFICEXP KEYGEN.EXE hash: 7803E300CDCD8A03BB5750974502D525

Created files:

%SysDir%\macromd\Another bang bus victim forced rape sex cum.mpg.exe
%SysDir%\macromd\babes with great lips that knows how suck cock.mpg.pif
%SysDir%\macromd\Blonde and Japanese girl bukkake.mpg.exe
%SysDir%\macromd\blonde beauty ass fucked.mpg.pif
%SysDir%\macromd\brunette fucking in bedroom with boyfriend.mpg.pif
%SysDir%\macromd\busty asian babe with a hairy box.mpg.pif
%SysDir%\macromd\cool rooster raiding hen house for hot babes, link city.mpg.pif
%SysDir%\macromd\couple babes getting off with well hung dude.mpg.pif
%SysDir%\macromd\cute girl giving head.exe
%SysDir%\macromd\cutie who became addicted to dildo and fired her lover.mpg.pif
%SysDir%\macromd\fetish bondage preteen porno.mpg.pif
%SysDir%\macromd\fine babe spreading extremely hot ass and furball.mpg.pif
%SysDir%\macromd\first time anal and she loves it.mpg.pif
%SysDir%\macromd\fun slut who let dude eat her off in jacuzzi.mpg.pif
%SysDir%\macromd\gay stud giving head and fucking.mpg.pif
%SysDir%\macromd\girls with cock in hand and mouths fill with cum .mpg.pif
%SysDir%\macromd\gorgious babe who quit school to model pretty pink.mpg.pif
%SysDir%\macromd\hardcored blonde mature.mpg.pif
%SysDir%\macromd\Harry Potter and the sorcerors stone.divx.exe
%SysDir%\macromd\Jenna Jamison Dildo Humping.exe
%SysDir%\macromd\kill osama bin laden game.exe
%SysDir%\macromd\kitty-cat with horny beaver that needs licking.mpg.pif
%SysDir%\macromd\Microsoft Office XP (english) key generator.exe
%SysDir%\macromd\naturaly tan babe with gorgous body.mpg.pif
%SysDir%\macromd\OfficeXP Keygen.exe
%SysDir%\macromd\Pamela Anderson.exe
%SysDir%\macromd\porn account cracker.exe
%SysDir%\macromd\sexy amatures sucking whole bag.mpg.pif
%SysDir%\macromd\teen tied up and raped.exe
%SysDir%\macromd\trio having hardcore fucking fun.mpg.pif
%SysDir%\macromd\two large black bones in a small white box.mpg.pif
%SysDir%\macromd\yummy lesbos licking.mpg.pif
%SysDir%\winxcfg.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\winxcfg.exe: %WinDir%\System32\winxcfg.exe

Detected by UnHackMe:

OFFICEXP KEYGEN.EXE
Default location: %SYSDIR%\MACROMD\OFFICEXP KEYGEN.EXE

Dropper information:
MD5: 0bd3e10cd94c21dfff0e97fa2ec01d73
File size: 74005 bytes