Solved! Use CTFMOM.EXE (Trojan Magania) Removal Guide

I will tell you in this post how to fix the issue manually and how to clean it automatically using a special powerful removal tool. You can download the removal program for free here:

Manual removal instructions:

CTFMOM.EXE – Trojan Magania removal

File MD5 Virus Alias
CTFMOM.EXE 10bff85cdb495ddf4425864999af4901 Trojan Magania
CTFMOM.EXE 10bff85cdb495ddf4425864999af4901 Trojan Lineage
CTFMOM.EXE 10bff85cdb495ddf4425864999af4901 Trojan Eldorado
CTFMOM.EXE 10bff85cdb495ddf4425864999af4901 Trojan OnLineGames
CTFMOM.EXE 10bff85cdb495ddf4425864999af4901 Trojan Agent
CTFMOM.EXE 10bff85cdb495ddf4425864999af4901 Trojan Crypt

CTFMOM.EXE size: 25733 bytes
CTFMOM.EXE hash: 10BFF85CDB495DDF4425864999AF4901

Created files:

%WinDir%\fOnts\wQ7KbaNZKMe5G4qZ.fon
%SysDir%\A1A6BC2E.dll
%SysDir%\CIFN0N.exe
%SysDir%\CTFM0M.exe
%SysDir%\CTFM0N.exe
%SysDir%\CTFMOM.exe
%SysDir%\CTFN0M.exe
%SysDir%\CTFNOM.exe
%SysDir%\cywn0506.exe
%SysDir%\dfc8ac3ed7da.dll
%SysDir%\EN7hzSreCat8.dll
%SysDir%\JPccCJnKygDdp3.dll
%SysDir%\kSVHjMeWr5ZZY47.dll
%SysDir%\xg4hAPNygs29.dll

Detected by UnHackMe:

CTFMOM.EXE
Default location: %SYSDIR%\CTFMOM.EXE

Dropper information:
MD5: 634080b5bc80c613fd3cc0119c51b575
File size: 1996101 bytes

Leave a Reply