XF-A2011-64BITS.EXE is KeyGen AutoDesk

I will tell you in this post how to fix the issue manually and how to clean it automatically using a special powerful removal tool. You can download the removal program for free here:

The file XF-A2011-64BITS.EXE is not a virus.
The program XF-A2011-64BITS.EXE is a system security tool.
But the XF-A2011-64BITS.EXE tool may be used to compromise computer security by the hacker.
Use the XF-A2011-64BITS.EXE file at your own risk!
You can delete the XF-A2011-64BITS.EXE program from your computer with problems.

Malware Analysis of XF-A2011-64BITS.EXE
Full path on a computer: %Desktop%\Autodesk 2011 Products (x68 & x64) [h33t.com] Keygen-Only-X-FORCE\X-Force-A2011-64bits\xf-a2011-64bits.exe

Detected by UnHackMe:

XF-A2011-64BITS.EXE
Default location: %Desktop%\Autodesk 2011 Products (x68 & x64) [h33t.com] Keygen-Only-X-FORCE\X-Force-A2011-64bits\xf-a2011-64bits.exe

Removal Results: Success
Number of reboot: 1

XF-A2011-64BITS.EXE is known as:

KeyGen.AutoDesk

XF-A2011-64BITS.EXE hash:

  • MD5: 829350e2591c8629d3095c6eda2b4a63
The file tries to download information from some web sites.
How to quickly detect XF-A2011-64BITS.EXE presence?

Folders:
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com\chrome
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com\chrome\content
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com\defaults
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com\defaults\preferences
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com\locale
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com\locale\en-US
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com\skin
  • %Desktop%\Autodesk 2011 Products (x68 & x64) [h33t.com] Keygen-Only-X-FORCE
  • %Desktop%\Autodesk 2011 Products (x68 & x64) [h33t.com] Keygen-Only-X-FORCE\X-Force-A2011-32bits
  • %Desktop%\Autodesk 2011 Products (x68 & x64) [h33t.com] Keygen-Only-X-FORCE\X-Force-A2011-64bits
  • %Program Files%\1ClickDownload
  • %Program Files%\Gophoto.it
Files:
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\gophoto@gophoto.it.xpi
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com\chrome\content\browser.xul
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com\chrome\content\dt.txt
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com\chrome\content\jquery.js
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com\chrome\content\ready.js
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com\chrome\content\util.js
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com\chrome.manifest
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com\defaults\preferences\prefs.js
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com\install.rdf
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com\locale\en-US\translations.dtd
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com\skin\icon16.png
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com\skin\icon48.png
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com\skin\skin.css
  • %Desktop%\Autodesk 2011 Products (x68 & x64) [h33t.com] Keygen-Only-X-FORCE\AUTODESK 2011 Product Keys.txt
  • %Desktop%\Autodesk 2011 Products (x68 & x64) [h33t.com] Keygen-Only-X-FORCE\install.txt
  • %Desktop%\Autodesk 2011 Products (x68 & x64) [h33t.com] Keygen-Only-X-FORCE\Instruction.txt
  • %Desktop%\Autodesk 2011 Products (x68 & x64) [h33t.com] Keygen-Only-X-FORCE\Serial.txt
  • %Desktop%\Autodesk 2011 Products (x68 & x64) [h33t.com] Keygen-Only-X-FORCE\X-Force-A2011-32bits\xf-a2011-32bits.exe
  • %Desktop%\Autodesk 2011 Products (x68 & x64) [h33t.com] Keygen-Only-X-FORCE\X-Force-A2011-32bits\xf-a2011-32bits.rar
  • %Desktop%\Autodesk 2011 Products (x68 & x64) [h33t.com] Keygen-Only-X-FORCE\X-Force-A2011-64bits\xf-a2011-64bits.exe
  • %Desktop%\Autodesk 2011 Products (x68 & x64) [h33t.com] Keygen-Only-X-FORCE\X-Force-A2011-64bits\xf-a2011-64bits.rar
  • %Desktop%\Download Autodesk_2011_Products_[x86_&_x64]_[h33t.lnk
  • %Temp%\nsq3.tmp
  • %Program Files%\1ClickDownload\1clextsetup.exe
  • %Program Files%\1ClickDownload\1Click.cfg
  • %Program Files%\1ClickDownload\1ClickDownloader.exe
  • %Program Files%\1ClickDownload\Autodesk_2011_Products_[x86_&_x64]_[h33t.torrent
  • %Program Files%\1ClickDownload\mainpackfa.exe
  • %Program Files%\1ClickDownload\oneclickdownloader10.crx
  • %Program Files%\1ClickDownload\uninst.exe
  • %Program Files%\Gophoto.it\gophotoit10.crx


  • I use UnHackMe for cleaning ads and viruses from my friend's computers, because it is extremely fast and effective.




    1. Download UnHackMe for free

    UnHackMe removes Adware/Spyware/Unwanted Programs/Browser Hijackers/Search Redirectors from your PC easily.

    Free Download

    UnHackMe is compatible with most antivirus software.
    UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans and backdoors. VirusTotal (0/56).
    System Requirements: Windows 2000-Windows 8.1/10 32 or 64-bit. UnHackMe uses minimum of computer resources.

    2. Double click on UnHackMe_setup.exe

    You will see a confirmation screen with verified publisher: Greatis Software. Verified Publisher Greatis Software

    Once UnHackMe has installed has installed the first Scan will start automatically

    Review the detected threats

    3. Carefully review the detected threats!

    Click Remove button or False Positive.

    Enjoy!