Solved! Use CTFNOM.EXE (Trojan OnLineGames) Removal Guide

I will tell you in this post how to fix the issue manually and how to clean it automatically using a special powerful removal tool. You can download the removal program for free here:

Manual removal instructions:

CTFNOM.EXE – Trojan OnLineGames removal

File MD5 Virus Alias
CTFNOM.EXE f70a914f074242aace8d1cc5f86a44b2 Trojan OnLineGames
CTFNOM.EXE f70a914f074242aace8d1cc5f86a44b2 Trojan Lineage
CTFNOM.EXE f70a914f074242aace8d1cc5f86a44b2 Trojan Eldorado
CTFNOM.EXE f70a914f074242aace8d1cc5f86a44b2 Trojan Magania
CTFNOM.EXE f70a914f074242aace8d1cc5f86a44b2 Trojan Agent
CTFNOM.EXE f70a914f074242aace8d1cc5f86a44b2 Trojan Crypt

CTFNOM.EXE size: 28798 bytes
CTFNOM.EXE hash: F70A914F074242AACE8D1CC5F86A44B2

Created files:

%WinDir%\fOnts\wQ7KbaNZKMe5G4qZ.fon
%SysDir%\A1A6BC2E.dll
%SysDir%\CIFN0N.exe
%SysDir%\CTFM0M.exe
%SysDir%\CTFM0N.exe
%SysDir%\CTFMOM.exe
%SysDir%\CTFN0M.exe
%SysDir%\CTFNOM.exe
%SysDir%\cywn0506.exe
%SysDir%\dfc8ac3ed7da.dll
%SysDir%\EN7hzSreCat8.dll
%SysDir%\JPccCJnKygDdp3.dll
%SysDir%\kSVHjMeWr5ZZY47.dll
%SysDir%\xg4hAPNygs29.dll

Detected by UnHackMe:

CTFNOM.EXE
Default location: %SYSDIR%\CTFNOM.EXE

Dropper information:
MD5: 634080b5bc80c613fd3cc0119c51b575
File size: 1996101 bytes

Leave a Reply