OCEANFILEDN.EXE – Unclassified Malware removal

OCEANFILEDN.EXE size: 135048 bytes
OCEANFILEDN.EXE hash: F82207CB9176C685A458089E4ED6E2F6

Created files:

%Program Files%\Fileocean\COMDLG32.OCX
%Program Files%\Fileocean\fileoceandn.exe
%Program Files%\Fileocean\oceanfiledn.exe
%Program Files%\Fileocean\Uninstall.exe
%WinDir%\oceansetup.exe
%SysDir%\INETKO.DLL

Autostart registry keys:

HKLM\Software\Classes\CLSID\{3C4F3BE3-47EB-101B-A3C9-08002B2F49FB}\InprocServer32 : %Program Files%\Fileocean\COMDLG32.OCX
HKLM\Software\Classes\CLSID\{3C4F3BE5-47EB-101B-A3C9-08002B2F49FB}\InprocServer32 : %Program Files%\Fileocean\COMDLG32.OCX
HKLM\Software\Classes\CLSID\{3C4F3BE7-47EB-101B-A3C9-08002B2F49FB}\InprocServer32 : %Program Files%\Fileocean\COMDLG32.OCX
HKLM\Software\Classes\CLSID\{48E59293-9880-11CF-9754-00AA00C00908}\InprocServer32 : %WinDir%\System32\MSINET.OCX
HKLM\Software\Classes\CLSID\{48E59294-9880-11CF-9754-00AA00C00908}\InprocServer32 : %WinDir%\System32\MSINET.OCX
HKLM\Software\Classes\CLSID\{48E59295-9880-11CF-9754-00AA00C00908}\InprocServer32 : %WinDir%\System32\MSINET.OCX
HKLM\Software\Classes\CLSID\{7629CFA2-3FE5-101B-A3C9-08002B2F49FB}\InprocServer32 : %Program Files%\Fileocean\COMDLG32.OCX
HKLM\Software\Classes\CLSID\{7629CFA4-3FE5-101B-A3C9-08002B2F49FB}\InprocServer32 : %Program Files%\Fileocean\COMDLG32.OCX
HKLM\Software\Classes\CLSID\{F9043C85-F6F2-101A-A3C9-08002B2F49FB}\InprocServer32 : %Program Files%\Fileocean\COMDLG32.OCX
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\FileOcean: %Program Files%\Fileocean\fileoceandn.exe

Detected by UnHackMe:

OCEANFILEDN.EXE
Default location: %PROGRAM FILES%\FILEOCEAN\OCEANFILEDN.EXE

Dropper information:
MD5: 2fa566169346a4edaa57e81fa7e7c9b6
File size: 950152 bytes