CTFMON.EXE – Worm Vobfus removal

CTFMON.EXE size: 46592 bytes
CTFMON.EXE hash: 21789819AC096817BFE7BD1B5045C479

Created files:

C:\Recycled\CTFMON.EXE
C:\Recycled\SMSS.EXE
C:\Recycled\SPOOLSV.EXE
C:\Recycled\SVCHOST.EXE

Detected by UnHackMe:

CTFMON.EXE
Default location: C:\RECYCLED\CTFMON.EXE

Dropper information:
MD5: 057118ff66c2c49c8bf94c142318ac14
File size: 46592 bytes