Solved! Use WINWORD.EXE (Trojan Crypt) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

WINWORD.EXE – Trojan Crypt removal

File MD5 Virus Alias
WINWORD.EXE 862a96836fe55f230039047fc1897b6f Trojan Crypt
WINWORD.EXE 862a96836fe55f230039047fc1897b6f Trojan Agent

WINWORD.EXE size: 76288 bytes
WINWORD.EXE hash: 862A96836FE55F230039047FC1897B6F

Created files:

%SysDir%\Com\ctfmoon.exe
%SysDir%\WINWORD.EXE
%WinDir%\Temp\_$Cf\osk.exe

Detected by UnHackMe:

WINWORD.EXE
Default location: %SYSDIR%\WINWORD.EXE

Dropper information:
MD5: c67549280bae9ed93eea1f498a6fa10e
File size: 142613 bytes

Leave a Reply