The file CTFMO.EXE is a computer worm.
The worm CTFMO.EXE is a self-replicating malicious program,
which uses a computer network to send copies of itself to other computers.
You must fix the CTFMO.EXE problem as soon as possible!
Delete the file CTFMO.EXE from all infected computers in your network.
Set up your network firewall against CTFMO.EXE intervention.
Malware Analysis of CTFMO.EXE
Full path on a computer: %SysDir%\ctfmo.exe
Detected by UnHackMe:
Item Name: ctfmo.exe
Author:
Related File: %SysDir%\ctfmo.exe
Type: Registry Run
Removal Results: Success
Number of reboot: 1
CTFMO.EXE is known as:
Worm.Autorun, Trojan.FlyStudio.lgis, Lineage.EPIF, Trojan.Agent.1097728.B, ASD.Prevention
CTFMO.EXE hash:
- MD5: 199e87ea6b03e907316560a58f7b51af
How to quickly detect CTFMO.EXE presence?
![]( "Registry")
Registry:
![]( "Folders")
Folders:
![]( "Files")
Files:
Registry:- HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ctfmo.exe: “%SysDir%\ctfmo.exe”
Folders:- %Temp%\E_4
Files:- %Temp%\E_4\krnln.fnr
- %SysDir%\ctfmo.exe