UTILOCEANUP.EXE – Unclassified Malware removal

UTILOCEANUP.EXE size: 135048 bytes
UTILOCEANUP.EXE hash: 3E3113D50B6D4E9EF04DE622A50299E4

Created files:

%Program Files%\Utilocean\COMDLG32.OCX
%Program Files%\Utilocean\Uninstall.exe
%Program Files%\Utilocean\utiloceandn.exe
%Program Files%\Utilocean\utiloceanup.exe
%SysDir%\INETKO.DLL
%WinDir%\utiloceansetup.exe

Autostart registry keys:

HKLM\Software\Classes\CLSID\{3C4F3BE3-47EB-101B-A3C9-08002B2F49FB}\InprocServer32 : %Program Files%\Utilocean\COMDLG32.OCX
HKLM\Software\Classes\CLSID\{3C4F3BE5-47EB-101B-A3C9-08002B2F49FB}\InprocServer32 : %Program Files%\Utilocean\COMDLG32.OCX
HKLM\Software\Classes\CLSID\{3C4F3BE7-47EB-101B-A3C9-08002B2F49FB}\InprocServer32 : %Program Files%\Utilocean\COMDLG32.OCX
HKLM\Software\Classes\CLSID\{48E59293-9880-11CF-9754-00AA00C00908}\InprocServer32 : %WinDir%\System32\MSINET.OCX
HKLM\Software\Classes\CLSID\{48E59294-9880-11CF-9754-00AA00C00908}\InprocServer32 : %WinDir%\System32\MSINET.OCX
HKLM\Software\Classes\CLSID\{48E59295-9880-11CF-9754-00AA00C00908}\InprocServer32 : %WinDir%\System32\MSINET.OCX
HKLM\Software\Classes\CLSID\{7629CFA2-3FE5-101B-A3C9-08002B2F49FB}\InprocServer32 : %Program Files%\Utilocean\COMDLG32.OCX
HKLM\Software\Classes\CLSID\{7629CFA4-3FE5-101B-A3C9-08002B2F49FB}\InprocServer32 : %Program Files%\Utilocean\COMDLG32.OCX
HKLM\Software\Classes\CLSID\{F9043C85-F6F2-101A-A3C9-08002B2F49FB}\InprocServer32 : %Program Files%\Utilocean\COMDLG32.OCX
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\UtilOcean: %Program Files%\Utilocean\utiloceanup.exe

Detected by UnHackMe:

UTILOCEANUP.EXE
Default location: %PROGRAM FILES%\UTILOCEAN\UTILOCEANUP.EXE

Dropper information:
MD5: b2c361e7c627606fca789e1f2cc71d00
File size: 950152 bytes