UNINST.EXE – Unclassified Malware removal

UNINST.EXE size: 63000 bytes
UNINST.EXE hash: 26AAB944AB5D058586604D6E217D2A05

Created files:

%Program Files%\barocn\barocn.exe
%Program Files%\barocn\barosvc.exe
%Program Files%\barocn\uninst.exe
%Common AppData%\Microsoft\Dr Watson\user.dmp

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\barocn\Type: 10000000
HKLM\System\CurrentControlSet\Services\barocn\Start: 02000000
HKLM\System\CurrentControlSet\Services\barocn\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\barocn\DisplayName: barocn svc
HKLM\System\CurrentControlSet\Services\barocn\ImagePath: %Program Files%\barocn\barosvc.exe

Detected by UnHackMe:

UNINST.EXE
Default location: %PROGRAM FILES%\BAROCN\UNINST.EXE

Dropper information:
MD5: 62c82fea6ddd2c530fc4bb0de94c995e
File size: 161531 bytes