CUSTOMINSTALLATIONPLUGIN.DLL – Unclassified Malware removal

CUSTOMINSTALLATIONPLUGIN.DLL size: 892928 bytes
CUSTOMINSTALLATIONPLUGIN.DLL hash: 8DFBCE00197A100FDB7D72B0DC620BBE

Created files:

%TEMP%\00C5AD0004575EAAB4206A0D4E2E67E6 Setup.exe
%TEMP%\1B40H676\00C5AD0004575EAAB4206A0D4E2E67E6 Setup\db.pdb
%TEMP%\1B40H676\00C5AD0004575EAAB4206A0D4E2E67E6 Setup\main.pdb
%TEMP%\1B40H676\00C5AD0004575EAAB4206A0D4E2E67E6 Setup\plugins\0\StdUI.dll
%TEMP%\1B40H676\00C5AD0004575EAAB4206A0D4E2E67E6 Setup\plugins\1\VistaPlugIn.dll
%TEMP%\1B40H676\00C5AD0004575EAAB4206A0D4E2E67E6 Setup\plugins\2\CustomInstallationPlugIn.dll
%TEMP%\1B40H676\00C5AD0004575EAAB4206A0D4E2E67E6 Setup\presetup\GameInstaller.exe
%TEMP%\1B40H676\00C5AD0004575EAAB4206A0D4E2E67E6 Setup\presetup\GamesBarFF.exe
%TEMP%\1B40H676\00C5AD0004575EAAB4206A0D4E2E67E6 Setup\presetup\OberonDetectionApplication.exe
%TEMP%\1B40H676\00C5AD0004575EAAB4206A0D4E2E67E6 Setup\presetup\occci.exe
%TEMP%\1B40H676\00C5AD0004575EAAB4206A0D4E2E67E6 Setup\presetup\sch.exe
%TEMP%\1B40H676\00C5AD0004575EAAB4206A0D4E2E67E6 Setup\presetup\setup.exe
%TEMP%\1B40H676\00C5AD0004575EAAB4206A0D4E2E67E6 Setup\presetup\shp.exe
%TEMP%\1B40H676\00C5AD0004575EAAB4206A0D4E2E67E6 Setup\presetup\ToolbarInstaller.exe
%TEMP%\1B40H676\00C5AD0004575EAAB4206A0D4E2E67E6 Setup\presetup.rgn
%TEMP%\1B40H676\00C5AD0004575EAAB4206A0D4E2E67E6 Setup\Uninstall.exe
%TEMP%\1B40H676\Resume.exe
%TEMP%\1B40H676\unpack.dll

Detected by UnHackMe:

CUSTOMINSTALLATIONPLUGIN.DLL
Default location: %TEMP%\1B40H676\00C5AD0004575EAAB4206A0D4E2E67E6 SETUP\PLUGINS\2\CUSTOMINSTALLATIONPLUGIN.DLL

Dropper information:
MD5: 00c5ad0004575eaab4206a0d4e2e67e6
File size: 12336536 bytes