WINXCFG.EXE – Unclassified Malware removal

WINXCFG.EXE size: 72704 bytes
WINXCFG.EXE hash: BF30213B41D81B53061306EBAF8C16EE

Created files:

%SysDir%\macromd\15 year old on beach.mpg.exe
%SysDir%\macromd\15 year old webcam.mpg.pif
%SysDir%\macromd\16 year old on beach.exe
%SysDir%\macromd\aimhacker.exe
%SysDir%\macromd\amateur slut fingering herself threw her wet panties.mpg.pif
%SysDir%\macromd\AOL.exe
%SysDir%\macromd\babes with great lips that knows how suck cock.mpg.pif
%SysDir%\macromd\babes with oversized hooters spreading.mpg.pif
%SysDir%\macromd\Britney Spears Dance Beat.exe
%SysDir%\macromd\career girls playing with their snatch after work.mpg.pif
%SysDir%\macromd\cool rooster raiding hen house for hot babes, link city.mpg.pif
%SysDir%\macromd\cute teen fingering herself on the sofa.mpg.pif
%SysDir%\macromd\fetish bondage preteen porno.mpg.pif
%SysDir%\macromd\fun slut who let dude eat her off in jacuzzi.mpg.pif
%SysDir%\macromd\head rooster pimping hot little tender ass chickens.mpg.pif
%SysDir%\macromd\honie displaying raw pink ass.mpg.pif
%SysDir%\macromd\honie playing in her cunt with newly bought toy.mpg.pif
%SysDir%\macromd\honie with thick ass spreading her money maker.mpg.pif
%SysDir%\macromd\honies with incredibly delicious big boobs.mpg.pif
%SysDir%\macromd\hotmailhacker.exe
%SysDir%\macromd\jenna jameson – xxx nurse scene.mpg.pif
%SysDir%\macromd\Lolita preteen sex.mpeg.pif
%SysDir%\macromd\nasty chick in hardcore fucking.mpg.pif
%SysDir%\macromd\neighbor boy fucking grandma after mowing her grass.mpg.pif
%SysDir%\macromd\old fucker punishing teeny.mpg.pif
%SysDir%\macromd\Play Games Online For FREE.exe
%SysDir%\macromd\play station emulator crack.exe
%SysDir%\macromd\polish naturals with nice round titties.mpg.pif
%SysDir%\macromd\teen spreading in the kitchen.mpg.pif
%SysDir%\macromd\teen taking off her panties outdoors.mpg.pif
%SysDir%\macromd\two studs gangbanging a hot little sluts holes.mpg.pif
%SysDir%\macromd\XXX Porn Passwords.exe
%SysDir%\winxcfg.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\winxcfg.exe: %WinDir%\System32\winxcfg.exe

Detected by UnHackMe:

WINXCFG.EXE
Default location: %SYSDIR%\WINXCFG.EXE

Dropper information:
MD5: 0067403774158c6b4c6297564eaa4ad2
File size: 93689 bytes