Solved! Use AEHMDFCO.EXE (Trojan Crypt) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

AEHMDFCO.EXE – Trojan Crypt removal

File MD5 Virus Alias
AEHMDFCO.EXE 68936a25e60a2fa24688188a9db26226 Trojan Crypt
AEHMDFCO.EXE 68936a25e60a2fa24688188a9db26226 Trojan PAK_Generic
AEHMDFCO.EXE 68936a25e60a2fa24688188a9db26226 Trojan Eldorado

AEHMDFCO.EXE size: 94208 bytes
AEHMDFCO.EXE hash: 68936A25E60A2FA24688188A9DB26226

Created files:

%SysDir%\Aehmdfco.exe
%SysDir%\Maooinla.dll

Autostart registry keys:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ctfmon.exe: %WinDir%\System32\ctfmon.exe

Detected by UnHackMe:

AEHMDFCO.EXE
Default location: %SYSDIR%\AEHMDFCO.EXE

Dropper information:
MD5: bb9689d87dc4fdeace384ac6d26a04f0
File size: 94208 bytes

Leave a Reply