I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.
CTFMON.EXE – Trojan Agent removal
| File | MD5 | Virus Alias |
|---|---|---|
| CTFMON.EXE | 2740477cff13a8864f4a5f9a9aff0a23 | Trojan Agent |
| CTFMON.EXE | 2740477cff13a8864f4a5f9a9aff0a23 | Trojan Xema |
| CTFMON.EXE | 2740477cff13a8864f4a5f9a9aff0a23 | Trojan Hllw |
CTFMON.EXE size: 46592 bytes
CTFMON.EXE hash: 2740477CFF13A8864F4A5F9A9AFF0A23
Created files:
C:\Recycled\CTFMON.EXE
C:\Recycled\SMSS.EXE
C:\Recycled\SPOOLSV.EXE
C:\Recycled\SVCHOST.EXE
Autostart registry keys:
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit: C:\recycled\SVCHOST.exe,
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell: Explorer.exe “C:\recycled\SVCHOST.exe”
Detected by UnHackMe:
CTFMON.EXE
Default location: C:\RECYCLED\CTFMON.EXE
Dropper information:
MD5: 0c3bae80b41f8a3445a54106629db999
File size: 46592 bytes