GINSTALL.DLL – Unclassified Malware removal

GINSTALL.DLL size: 56320 bytes
GINSTALL.DLL hash: 242089D713B2AC02B1F81AE0E8FAA25D

Created files:

%Program Files%\Winks Instalador\1.MCO
%Program Files%\Winks Instalador\e.exe
%Program Files%\Winks Instalador\ig.exe
%Program Files%\Winks Instalador\MSNContentCA.cer
%Program Files%\Winks Instalador\msngserv.exe
%Program Files%\Winks Instalador\mswinsck.ocx
%TEMP%\ginstall.dll

Autostart registry keys:

HKLM\Software\Classes\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\InprocServer32 : %Program Files%\Winks Instalador\MSWINSCK.OCX
HKLM\Software\Classes\CLSID\{248DD897-BB45-11CF-9ABC-0080C7E7B78D}\InprocServer32 : %Program Files%\Winks Instalador\MSWINSCK.OCX

Detected by UnHackMe:

GINSTALL.DLL
Default location: %TEMP%\GINSTALL.DLL

Dropper information:
MD5: 2e8cd88ccfd544b4cdbb076bd45d2a62
File size: 266066 bytes