CTFMON.EXE – Trojan Krap

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

CTFMON.EXE – Trojan Krap removal

File MD5 Virus Alias
CTFMON.EXE ac9dacc3edec7a821eb87e3910a5f869 Trojan Krap
CTFMON.EXE ac9dacc3edec7a821eb87e3910a5f869 Trojan SuspiciousFile
CTFMON.EXE ac9dacc3edec7a821eb87e3910a5f869 Trojan Generic
CTFMON.EXE ac9dacc3edec7a821eb87e3910a5f869 Trojan Hllw
CTFMON.EXE ac9dacc3edec7a821eb87e3910a5f869 Trojan Agent

CTFMON.EXE size: 45568 bytes
CTFMON.EXE hash: AC9DACC3EDEC7A821EB87E3910A5F869

Created files:

C:\Recycled\CTFMON.EXE
C:\Recycled\SMSS.EXE
C:\Recycled\SPOOLSV.EXE
C:\Recycled\SVCHOST.EXE

Autostart registry keys:

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit: C:\recycled\SVCHOST.exe,
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell: Explorer.exe “C:\recycled\SVCHOST.exe”

Detected by UnHackMe:

CTFMON.EXE
Default location: C:\RECYCLED\CTFMON.EXE

Dropper information:
MD5: 0ba3c209ca757a1215e30a47da5d18b3
File size: 45568 bytes

Leave a Reply