CTFM00.EXE - Dangerous
%TEMP%\CTFM00.EXE
Manual removal instructions:
Antivirus Report of %TEMP%\CTFM00.EXE:
%temp%\ctfm00.exe
We suggest you to remove CLEARNLOADIMAGE.SYS from your computer as soon as possible.
CLEARNLOADIMAGE.SYS is known as: Rootkit.Alureon, Troj.Agent.a.(kcloud).
MD5 of CLEARNLOADIMAGE.SYS = beefa538689ebc9903cea9e6586c39c0
CLEARNLOADIMAGE.SYS size is 8704 bytes.
Full path on a computer: %TEMP%\CTFM00.EXE
Related Files:
%Temp%\AccInfo.ini
%Temp%\CCProxy.dll
%Temp%\CCProxy.ini
%Temp%\ctfm00.exe
%Temp%\Language\ChineseGB.ini
%Temp%\Log\Log-2013-07-14.txt
%Temp%\zlib1.dll
%Temp%\~DF451B.tmp
C:\Documents and Settings\NetworkService\Cookies\system@baidu[1].txt
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\3PCMMHXU\desktop.ini
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\LUIIOHEM\desktop.ini
%SysDir%\7D1B3883.sys
%SysDir%\cfghw.tmp
%SysDir%\CLEARNLOADIMAGE.sys
%SysDir%\gametohw.exe
%SysDir%\Tenb7fc.exe
%SysDir%\vmb7fc.exe
%SysDir%\xxx.sys
%SysDir%\ztb7fc.exe
%WinDir%\Temp\atiiixxvi.exe
%WinDir%\Temp\clientbar.exe
%WinDir%\Temp\loadalljpg.htm
%WinDir%\Temp\md5.htm
%WinDir%\Temp\minihook.dll
%WinDir%\Temp\srtinfo.log
%WinDir%\Temp\_191968.txt
%WinDir%\cklisten.exe
%WinDir%\KB2536276666.log
| %TEMP%\CTFM00.EXE | Rootkit.Alureon, Troj.Agent.a.(kcloud). |
| %TEMP%\CTFM00.EXE | Dangerous |
| %TEMP%\CTFM00.EXE | High Risk |
CLEARNLOADIMAGE.SYS is known as: Rootkit.Alureon, Troj.Agent.a.(kcloud).
MD5 of CLEARNLOADIMAGE.SYS = beefa538689ebc9903cea9e6586c39c0
CLEARNLOADIMAGE.SYS size is 8704 bytes.
Full path on a computer: %TEMP%\CTFM00.EXE
Related Files:
%Temp%\AccInfo.ini
%Temp%\CCProxy.dll
%Temp%\CCProxy.ini
%Temp%\ctfm00.exe
%Temp%\Language\ChineseGB.ini
%Temp%\Log\Log-2013-07-14.txt
%Temp%\zlib1.dll
%Temp%\~DF451B.tmp
C:\Documents and Settings\NetworkService\Cookies\system@baidu[1].txt
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\3PCMMHXU\desktop.ini
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\LUIIOHEM\desktop.ini
%SysDir%\7D1B3883.sys
%SysDir%\cfghw.tmp
%SysDir%\CLEARNLOADIMAGE.sys
%SysDir%\gametohw.exe
%SysDir%\Tenb7fc.exe
%SysDir%\vmb7fc.exe
%SysDir%\xxx.sys
%SysDir%\ztb7fc.exe
%WinDir%\Temp\atiiixxvi.exe
%WinDir%\Temp\clientbar.exe
%WinDir%\Temp\loadalljpg.htm
%WinDir%\Temp\md5.htm
%WinDir%\Temp\minihook.dll
%WinDir%\Temp\srtinfo.log
%WinDir%\Temp\_191968.txt
%WinDir%\cklisten.exe
%WinDir%\KB2536276666.log
Dmitry Sokolov:
I created UnHackMe in 2006 to fix the problem that antivioruses did not fix: detecting rootkits.
Since that time I work every day to fix the issues that antiviruses cannot.
If your antivirus have not helped you solve the problem, you should try UnHackMe.
We are a small company and you can ask me directly, if you have any questions.