SCREMOTE.EXE – Unclassified Malware removal

SCREMOTE.EXE size: 548864 bytes
SCREMOTE.EXE hash: 615522CA7199E2CB5AC64D9BAA711A3A

Created files:

%TEMP%\CAToollog
%TEMP%\sccleverbase\pv.exe
%TEMP%\sccleverbase\SCRemote.exe
%TEMP%\sccleverbase\scripts\addremove.rscript
%TEMP%\sccleverbase\scripts\allsoftware.rscript
%TEMP%\sccleverbase\scripts\cmd.rscript
%TEMP%\sccleverbase\scripts\installedsoftware.rscript
%TEMP%\sccleverbase\scripts\notepad.rscript
%TEMP%\sccleverbase\scripts\processlist.rscript
%TEMP%\sccleverbase\scripts\regclean.rscript
%TEMP%\sccleverbase\scripts\regedit.rscript
%TEMP%\sccleverbase\scripts\services.rscript
%TEMP%\sccleverbase\scripts\support.rscript
%TEMP%\sccleverbase\scripts\sysinfo.rscript
%TEMP%\sccleverbase\scripts\tier2.rscript
%TEMP%\sccleverbase\VNCHooks.dll

Detected by UnHackMe:

SCREMOTE.EXE
Default location: %TEMP%\SCCLEVERBASE\SCREMOTE.EXE

Dropper information:
MD5: 8a4f3aaef8028005e72cbb73338a6c2e
File size: 1496177 bytes