Solved! Use XMNJNYFX.DLL (Trojan Graftor) Removal Guide

I will tell you in this post how to fix the issue manually and how to clean it automatically using a special powerful removal tool. You can download the removal program for free here:

Manual removal instructions:

XMNJNYFX.DLL – Trojan Graftor removal

File MD5 Virus Alias
XMNJNYFX.DLL daf48b692479b828b14c2d888f6131dd Trojan Graftor
XMNJNYFX.DLL daf48b692479b828b14c2d888f6131dd Trojan UnwantedProgram
XMNJNYFX.DLL daf48b692479b828b14c2d888f6131dd Trojan SuspiciousFile
XMNJNYFX.DLL daf48b692479b828b14c2d888f6131dd Trojan Agent

XMNJNYFX.DLL size: 287744 bytes
XMNJNYFX.DLL hash: DAF48B692479B828B14C2D888F6131DD

Created files:

%Program Files%\Pay-By-Ads\Yahoo! Search\1.3.26.12\chromext64.dll
%Program Files%\Pay-By-Ads\Yahoo! Search\1.3.26.12\dsrlte.exe
%Program Files%\Pay-By-Ads\Yahoo! Search\1.3.26.12\dsrsetup.exe
%Program Files%\Pay-By-Ads\Yahoo! Search\1.3.26.12\hlpr64.exe
%Program Files%\Pay-By-Ads\Yahoo! Search\1.3.26.12\res.dll
%Program Files%\Pay-By-Ads\Yahoo! Search\1.3.26.12\uckpdfcS.dll
%Program Files%\Pay-By-Ads\Yahoo! Search\1.3.26.12\Xmnjnyfx.dll
%AppData%\Microsoft\CryptnetUrlCache\Content\34DA60AA966CD9270C5362E6AEF824CF
%AppData%\Microsoft\CryptnetUrlCache\Content\74FBF93595CFC8459196065CE54AD928
%AppData%\Microsoft\CryptnetUrlCache\MetaData\34DA60AA966CD9270C5362E6AEF824CF
%AppData%\Microsoft\CryptnetUrlCache\MetaData\74FBF93595CFC8459196065CE54AD928

Detected by UnHackMe:

XMNJNYFX.DLL
Default location: %PROGRAM FILES%\PAY-BY-ADS\YAHOO! SEARCH\1.3.26.12\XMNJNYFX.DLL

Dropper information:
MD5: eee9ea850aa8dce4b76c8b94352aa000
File size: 1203968 bytes

  • ariane gojol

    hi, if i run this antivirus, will my program lumion 5.0 run again?

    • Dmitrys

      Be careful. The patch is often fake and works as Trojan.