SYSINFO.EXE – Unclassified Malware removal

SYSINFO.EXE size: 151552 bytes
SYSINFO.EXE hash: E7426A129D335389ADD77AA35C32296B

Created files:

%AppData%\elefundesktops\watermillbywaterfall_screensaver\disable_preview_sound
%AppData%\elefundesktops\watermillbywaterfall_screensaver\disable_product_sound
%AppData%\elefundesktops\watermillbywaterfall_screensaver\empty
%AppData%\elefundesktops\watermillbywaterfall_screensaver\enable_product_sound
%AppData%\elefundesktops\watermillbywaterfall_screensaver\flash.exe
%AppData%\elefundesktops\watermillbywaterfall_screensaver\Flash9b.ocx
%AppData%\elefundesktops\watermillbywaterfall_screensaver\install
%AppData%\elefundesktops\watermillbywaterfall_screensaver\product
%AppData%\elefundesktops\watermillbywaterfall_screensaver\screensavercontoller.dll
%AppData%\elefundesktops\watermillbywaterfall_screensaver\screensaver_preview
%AppData%\elefundesktops\watermillbywaterfall_screensaver\settings
%AppData%\elefundesktops\watermillbywaterfall_screensaver\splash
%AppData%\elefundesktops\watermillbywaterfall_screensaver\swfplayer.exe
%AppData%\elefundesktops\watermillbywaterfall_screensaver\sysinfo.exe
%AppData%\elefundesktops\watermillbywaterfall_screensaver\uninstall
%AppData%\elefundesktops\watermillbywaterfall_screensaver\uninstall.exe
%AppData%\elefundesktops\watermillbywaterfall_screensaver\Watermill by Waterfall.scr
%AppData%\elefundesktops\watermillbywaterfall_screensaver\Watermill by Waterfall_installer.exe
%SysDir%\Flash9b.ocx

Detected by UnHackMe:

SYSINFO.EXE
Default location: %APPDATA%\ELEFUNDESKTOPS\WATERMILLBYWATERFALL_SCREENSAVER\SYSINFO.EXE

Dropper information:
MD5: 687565a902f5de688a884f1d9dbdea0b
File size: 6172976 bytes