Solved! Use CELBQJ32.EXE (Trojan Crypt) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

CELBQJ32.EXE – Trojan Crypt removal

File MD5 Virus Alias
CELBQJ32.EXE f54a64abcc99976aea790a7809d95801 Trojan Crypt
CELBQJ32.EXE f54a64abcc99976aea790a7809d95801 Trojan Eldorado
CELBQJ32.EXE f54a64abcc99976aea790a7809d95801 Trojan Agent

CELBQJ32.EXE size: 103424 bytes
CELBQJ32.EXE hash: F54A64ABCC99976AEA790A7809D95801

Created files:

%SysDir%\Celbqj32.exe
%SysDir%\Nficbndh.dll

Autostart registry keys:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ctfmon.exe: %WinDir%\System32\ctfmon.exe

Detected by UnHackMe:

CELBQJ32.EXE
Default location: %SYSDIR%\CELBQJ32.EXE

Dropper information:
MD5: a0954d5681b6297d52c836982b0753a0
File size: 103424 bytes

Leave a Reply