COUNTER.EXE – Unknown removal

COUNTER.EXE size: 73577 bytes
COUNTER.EXE hash: D9E19AAA295690DDE74848025B8261D0

Created files:

C:\FOUND.007.exe
C:\Msvbvm60.dll
%WinDir%\AE 0124 BE.exe
%WinDir%\AppPatch\AcAdProc.dll
%WinDir%\AppPatch\AcGenral.dll
%WinDir%\AppPatch\AcLayers.dll
%WinDir%\AppPatch\AcLua.dll
%WinDir%\AppPatch\AcSpecfc.dll
%WinDir%\AppPatch\AcXtrnal.dll
%WinDir%\AppPatch\apphelp.sdb
%WinDir%\AppPatch\apph_sp.sdb
%WinDir%\AppPatch\drvmain.sdb
%WinDir%\AppPatch\msimain.sdb
%WinDir%\AppPatch\sysmain.sdb
%WinDir%\Blue Lace 16.exe
%WinDir%\Coffee Bean.exe
%WinDir%\Cursors\appstar2.exe
%WinDir%\Cursors\appstar3.exe
%WinDir%\Cursors\appstart.exe
%WinDir%\Cursors\banana.exe
%WinDir%\Cursors\barber.exe
%WinDir%\Cursors\coin.exe
%WinDir%\Cursors\counter.exe
%WinDir%\Cursors\dinosau2.exe
%WinDir%\Cursors\dinosaur.exe
%WinDir%\Cursors\drum.exe
%WinDir%\Cursors\fillitup.exe
%WinDir%\Cursors\hand.exe
%WinDir%\Cursors\handapst.exe
%WinDir%\Cursors\handnesw.exe
%WinDir%\Cursors\handno.exe
%WinDir%\Cursors\handns.exe
%WinDir%\Cursors\handnwse.exe
%WinDir%\Cursors\handwait.exe
%WinDir%\Cursors\handwe.exe
%WinDir%\Cursors\horse.exe
%WinDir%\Cursors\hourgla2.exe
%WinDir%\Cursors\hourgla3.exe
%WinDir%\Cursors\hourglas.exe
%WinDir%\Cursors\metronom.exe
%WinDir%\Cursors\Msvbvm60.dll
%WinDir%\Cursors\piano.exe
%WinDir%\Cursors\rainbow.exe
%WinDir%\Cursors\raindrop.exe
%WinDir%\explorer.exe
%WinDir%\explorer.scf
%WinDir%\FeatherTexture.exe
%WinDir%\Gone Fishing.exe
%WinDir%\Greenstone.exe
%WinDir%\hh.exe
%WinDir%\imsins.BAK
%WinDir%\Msvbvm60.dll
%WinDir%\NOTEPAD.EXE
%WinDir%\Prairie Wind.exe
%WinDir%\regedit.exe
%WinDir%\REGLOCS.OLD
%WinDir%\Rhododendron.exe
%WinDir%\River Sumida.exe
%WinDir%\Santa Fe Stucco.exe
%WinDir%\Soap Bubbles.exe
%SysDir%\drivers\Msvbvm60.dll
%SysDir%\drivers\winlogon.exe
%SysDir%\Msvbvm60.dlll
%WinDir%\TASKMAN.EXE
%WinDir%\twain.dll
%WinDir%\twain_32.dll
%WinDir%\twunk_16.exe
%WinDir%\twunk_32.exe
%WinDir%\vmmreg32.dll
%WinDir%\winhelp.exe
%WinDir%\winhlp32.exe
%WinDir%\winnt.exe
%WinDir%\winnt256.exe
%WinDir%\WMSysPr9.prx
%WinDir%\Zapotec.exe
%WinDir%\_default.pif
D:\FOUND.007.exe
D:\Msvbvm60.dll

Detected by UnHackMe:

COUNTER.EXE
Default location: %WinDir%\CURSORS\COUNTER.EXE

Dropper information:
MD5: c6e9ca660c09256088833633687d0ac3
File size: 73159 bytes