Solved! Use CTFMON.RET (Virus Sality) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

CTFMON.RET – Virus Sality removal

FileMD5Virus Alias
CTFMON.RET 6f978b4174584bbd5174409cfe34ded8 Virus Sality

CTFMON.RET size: 49375 bytes
CTFMON.RET hash: 6F978B4174584BBD5174409CFE34DED8

Created files:

%SysDir%\ctfmon.exe
%SysDir%\CTFMON.RET
%SysDir%\SYSLIB32.DLL

Detected by UnHackMe:

CTFMON.RET
Default location: %SYSDIR%\CTFMON.RET

Dropper information:
MD5: 67c72290a2cc3ca624a133e3a2d3b718
File size: 166901 bytes

Leave a Reply