CHP.EXE – Unclassified Malware removal

CHP.EXE size: 41984 bytes
CHP.EXE hash: A6C90D52E51E95966AE1B2467CD192B9

Created files:

%Program Files%\%appdata%\winlogon\chp.exe
%Program Files%\%appdata%\winlogon\diablo121016.cl
%Program Files%\%appdata%\winlogon\diakgcn121016.cl
%Program Files%\%appdata%\winlogon\libblkmaker-0.1-0.dll
%Program Files%\%appdata%\winlogon\libblkmaker_jansson-0.1-0.dll
%Program Files%\%appdata%\winlogon\libcurl-4.dll
%Program Files%\%appdata%\winlogon\libjansson-4.dll
%Program Files%\%appdata%\winlogon\libusb-1.0.dll
%Program Files%\%appdata%\winlogon\miner.php
%Program Files%\%appdata%\winlogon\pdcurses.dll
%Program Files%\%appdata%\winlogon\phatk121016.cl
%Program Files%\%appdata%\winlogon\poclbm121016.cl
%Program Files%\%appdata%\winlogon\pthreadGC2.dll
%Program Files%\%appdata%\winlogon\scrypt121016.cl
%Program Files%\%appdata%\winlogon\scvhost.exe
%Program Files%\%appdata%\winlogon\zlib1.dll

Detected by UnHackMe:

CHP.EXE
Default location: %PROGRAM FILES%\%APPDATA%\WINLOGON\CHP.EXE

Dropper information:
MD5: 81cf9ac9feb9393ffb66960d1175153d
File size: 600414 bytes