Solved! Use CTFMOM.EXE (Trojan Magania) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

CTFMOM.EXE – Trojan Magania removal

File MD5 Virus Alias
CTFMOM.EXE 10bff85cdb495ddf4425864999af4901 Trojan Magania
CTFMOM.EXE 10bff85cdb495ddf4425864999af4901 Trojan Lineage
CTFMOM.EXE 10bff85cdb495ddf4425864999af4901 Trojan Eldorado
CTFMOM.EXE 10bff85cdb495ddf4425864999af4901 Trojan OnLineGames
CTFMOM.EXE 10bff85cdb495ddf4425864999af4901 Trojan Agent
CTFMOM.EXE 10bff85cdb495ddf4425864999af4901 Trojan Crypt

CTFMOM.EXE size: 25733 bytes
CTFMOM.EXE hash: 10BFF85CDB495DDF4425864999AF4901

Created files:

%WinDir%\fOnts\wQ7KbaNZKMe5G4qZ.fon
%SysDir%\A1A6BC2E.dll
%SysDir%\CIFN0N.exe
%SysDir%\CTFM0M.exe
%SysDir%\CTFM0N.exe
%SysDir%\CTFMOM.exe
%SysDir%\CTFN0M.exe
%SysDir%\CTFNOM.exe
%SysDir%\cywn0506.exe
%SysDir%\dfc8ac3ed7da.dll
%SysDir%\EN7hzSreCat8.dll
%SysDir%\JPccCJnKygDdp3.dll
%SysDir%\kSVHjMeWr5ZZY47.dll
%SysDir%\xg4hAPNygs29.dll

Detected by UnHackMe:

CTFMOM.EXE
Default location: %SYSDIR%\CTFMOM.EXE

Dropper information:
MD5: 634080b5bc80c613fd3cc0119c51b575
File size: 1996101 bytes

Leave a Reply