Solved! Use CTFNOM.EXE (Trojan OnLineGames) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

CTFNOM.EXE – Trojan OnLineGames removal

File MD5 Virus Alias
CTFNOM.EXE f70a914f074242aace8d1cc5f86a44b2 Trojan OnLineGames
CTFNOM.EXE f70a914f074242aace8d1cc5f86a44b2 Trojan Lineage
CTFNOM.EXE f70a914f074242aace8d1cc5f86a44b2 Trojan Eldorado
CTFNOM.EXE f70a914f074242aace8d1cc5f86a44b2 Trojan Magania
CTFNOM.EXE f70a914f074242aace8d1cc5f86a44b2 Trojan Agent
CTFNOM.EXE f70a914f074242aace8d1cc5f86a44b2 Trojan Crypt

CTFNOM.EXE size: 28798 bytes
CTFNOM.EXE hash: F70A914F074242AACE8D1CC5F86A44B2

Created files:

%WinDir%\fOnts\wQ7KbaNZKMe5G4qZ.fon
%SysDir%\A1A6BC2E.dll
%SysDir%\CIFN0N.exe
%SysDir%\CTFM0M.exe
%SysDir%\CTFM0N.exe
%SysDir%\CTFMOM.exe
%SysDir%\CTFN0M.exe
%SysDir%\CTFNOM.exe
%SysDir%\cywn0506.exe
%SysDir%\dfc8ac3ed7da.dll
%SysDir%\EN7hzSreCat8.dll
%SysDir%\JPccCJnKygDdp3.dll
%SysDir%\kSVHjMeWr5ZZY47.dll
%SysDir%\xg4hAPNygs29.dll

Detected by UnHackMe:

CTFNOM.EXE
Default location: %SYSDIR%\CTFNOM.EXE

Dropper information:
MD5: 634080b5bc80c613fd3cc0119c51b575
File size: 1996101 bytes

Leave a Reply