AKV.EXE – KeyLogger Ardamax

I will tell you in this post how to fix the issue manually and how to clean it automatically using a special powerful removal tool. You can download the removal program for free here:

Manual removal instructions:

AKV.EXE – KeyLogger Ardamax removal

File MD5 Virus Alias
AKV.EXE 752e814c2a5d197b8065501e786683c9 KeyLogger Ardamax
AKV.EXE 752e814c2a5d197b8065501e786683c9 Trojan Generic
AKV.EXE 752e814c2a5d197b8065501e786683c9 Trojan Xema
AKV.EXE 752e814c2a5d197b8065501e786683c9 Trojan Agent

AKV.EXE size: 468480 bytes
AKV.EXE hash: 752E814C2A5D197B8065501E786683C9

Created files:

%SysDir%\28463\AKV.exe
%SysDir%\28463\EVPN.001
%SysDir%\28463\EVPN.002
%SysDir%\28463\EVPN.006
%SysDir%\28463\EVPN.007
%SysDir%\28463\EVPN.exe
%Temp%\Necroxia Origin.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\EVPN Agent: %WinDir%\System32\28463\EVPN.exe

Detected by UnHackMe:

AKV.EXE
Default location: %SYSDIR%\28463\AKV.EXE

Dropper information:
MD5: 7c6bd8c08a5d3fcd3213c86e2655b91b
File size: 1974419 bytes