Solved! Use CTFMON.NRL (Virus Sality) Removal Guide

I will tell you in this post how to fix the issue manually and how to clean it automatically using a special powerful removal tool. You can download the removal program for free here:

Manual removal instructions:

CTFMON.NRL – Virus Sality removal

File MD5 Virus Alias
CTFMON.NRL 3d7d8b8ba5b36588efb771d77aeab9f2 Virus Sality

CTFMON.NRL size: 47654 bytes
CTFMON.NRL hash: 3D7D8B8BA5B36588EFB771D77AEAB9F2

Created files:

%SysDir%\ctfmon.exe
%SysDir%\CTFMON.NRL
%SysDir%\SYSLIB32.DLL

Detected by UnHackMe:

CTFMON.NRL
Default location: %SYSDIR%\CTFMON.NRL

Dropper information:
MD5: 71b74d4a65ae0111000f104dae15bf39
File size: 129305 bytes