Solved! Use CYWN0506.EXE (Worm Autorun) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

CYWN0506.EXE – Worm Autorun removal

File MD5 Virus Alias
CYWN0506.EXE a114253b23d540d92b9a7ba61bfc1886 Worm Autorun
CYWN0506.EXE a114253b23d540d92b9a7ba61bfc1886 Trojan Qhost
CYWN0506.EXE a114253b23d540d92b9a7ba61bfc1886 Trojan (Suspicious File)
CYWN0506.EXE a114253b23d540d92b9a7ba61bfc1886 Trojan XPACK
CYWN0506.EXE a114253b23d540d92b9a7ba61bfc1886 Trojan Xema
CYWN0506.EXE a114253b23d540d92b9a7ba61bfc1886 Trojan Downloader

CYWN0506.EXE size: 1821283 bytes
CYWN0506.EXE hash: A114253B23D540D92B9A7BA61BFC1886

Created files:

%WinDir%\fOnts\wQ7KbaNZKMe5G4qZ.fon
%SysDir%\A1A6BC2E.dll
%SysDir%\CIFN0N.exe
%SysDir%\CTFM0M.exe
%SysDir%\CTFM0N.exe
%SysDir%\CTFMOM.exe
%SysDir%\CTFN0M.exe
%SysDir%\CTFNOM.exe
%SysDir%\cywn0506.exe
%SysDir%\dfc8ac3ed7da.dll
%SysDir%\EN7hzSreCat8.dll
%SysDir%\JPccCJnKygDdp3.dll
%SysDir%\kSVHjMeWr5ZZY47.dll
%SysDir%\xg4hAPNygs29.dll

Detected by UnHackMe:

CYWN0506.EXE
Default location: %SYSDIR%\CYWN0506.EXE

Dropper information:
MD5: 634080b5bc80c613fd3cc0119c51b575
File size: 1996101 bytes

Leave a Reply