AERO_DISABLE.EXE – Unclassified Malware removal

AERO_DISABLE.EXE size: 8704 bytes
AERO_DISABLE.EXE hash: B0AF77B8BEBF095F2BA73F4E6C8B85F9

Created files:

%TEMP%\SC_VNC_Temp_Files\Aero_disable.exe
%TEMP%\SC_VNC_Temp_Files\MSRC4Plugin.dsm
%TEMP%\SC_VNC_Temp_Files\vnchooks.dll
%TEMP%\SC_VNC_Temp_Files\winvnc.exe

Detected by UnHackMe:

AERO_DISABLE.EXE
Default location: %TEMP%\SC_VNC_TEMP_FILES\AERO_DISABLE.EXE

Dropper information:
MD5: 112051b366ab2b7a09b07bd9fcde8d58
File size: 454586 bytes