Solved! Use CMT.EXE (Worm Viking) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

CMT.EXE – Worm Viking removal

File MD5 Virus Alias
CMT.EXE 84f068f69f27861bb01dd8ad46c27718 Worm Viking
CMT.EXE 84f068f69f27861bb01dd8ad46c27718 Trojan, Suspicious File
CMT.EXE 84f068f69f27861bb01dd8ad46c27718 Trojan Generic
CMT.EXE 84f068f69f27861bb01dd8ad46c27718 Trojan Hllw
CMT.EXE 84f068f69f27861bb01dd8ad46c27718 Trojan Eldorado
CMT.EXE 84f068f69f27861bb01dd8ad46c27718 Trojan DNAScan

CMT.EXE size: 84284 bytes
CMT.EXE hash: 84F068F69F27861BB01DD8AD46C27718

Created files:

C:\cmt.exe
%Program Files%\Microsoft\WaterMark.exe
%SysDir%\rundll32mgr.exe
%Common AppData%\Apple Computer\Installer Cache\Safari 5.34.52.7\SetupAdmin.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit: c:\windows\System32\userinit.exe,,c:\program files\Microsoft\watermark.exe

Detected by UnHackMe:

CMT.EXE
Default location: C:\CMT.EXE

Dropper information:
MD5: b7fe63281995d31e4ef0f72c44a97ef0
File size: 668165 bytes

Leave a Reply