Solved! Use MBD.EXE (KeyLogger Ardamax) Removal Guide

I will tell you in this post how to fix the issue manually and how to clean it automatically using a special powerful removal tool. You can download the removal program for free here:

Manual removal instructions:

MBD.EXE – KeyLogger Ardamax removal

File MD5 Virus Alias
MBD.EXE 9dd994d5ee6dd09ab083d20d6c887db9 KeyLogger Ardamax
MBD.EXE 9dd994d5ee6dd09ab083d20d6c887db9 Trojan Artemis
MBD.EXE 9dd994d5ee6dd09ab083d20d6c887db9 Trojan CI
MBD.EXE 9dd994d5ee6dd09ab083d20d6c887db9 Trojan Graftor
MBD.EXE 9dd994d5ee6dd09ab083d20d6c887db9 Trojan Agent

MBD.EXE size: 2414080 bytes
MBD.EXE hash: 9DD994D5EE6DD09AB083D20D6C887DB9

Created files:

%WinDir%\DABUXJ\MBD.00
%WinDir%\DABUXJ\MBD.01
%WinDir%\DABUXJ\MBD.02
%WinDir%\DABUXJ\MBD.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\MBD Start: %WinDir%\DABUXJ\MBD.exe

Detected by UnHackMe:

MBD.EXE
Default location: %WinDir%\DABUXJ\MBD.EXE

Dropper information:
MD5: 2050fcd408b0899eb4268dcc800ada4b
File size: 2376704 bytes