sec5dec.exe is installed with ATAK.G Worm that uses its own SMTP engine to send itself as an attachment to the email addresses that it gathers from the files on the compromised computer.