Quantcast
Channel: How to Remove Malware
Viewing all articles
Browse latest Browse all 38585

CDVTTNFS.EXE is Trojan Winlock.3333

$
0
0

The file CDVTTNFS.EXE can destroy your system, thus making the computer to work abnormally.
CDVTTNFS.EXE is a dangerous file.
Remove CDVTTNFS.EXE from your computer immediately.
Kill the process CDVTTNFS.EXE and remove CDVTTNFS.EXE from the Windows startup.

Malware Analysis of CDVTTNFS.EXE
Full path on a computer: %Profile%\cdvttnfs.exe

Detected by UnHackMe:

Item Name: MSConfig
Author: AtomPark Software Inc.
Related File: %PROFILE%\CDVTTNFS.EXE
Type: Registry Run

Item Name: CDVTTNFS.EXE
Author:
Related File: %PROFILE%\CDVTTNFS.EXE
Type: Multi AV Detected Files

Removal Results: Success
Number of reboot: 1

CDVTTNFS.EXE is known as:

Trojan.Winlock.3333, Trj.dtcontx.G, Win32.PSW.Fareit.A

CDVTTNFS.EXE hash:

  • MD5: 24a6c3721cf71da5d522b7e0f6ceea78
The file tries to download information from some web sites.
How to quickly detect CDVTTNFS.EXE presence?
Registry:
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Run\MSConfig: “”%Profile%\cdvttnfs.exe”"
Files:
  • %Recent%\001a6c071aa01eb0ff9077fd45d8e4f1.lnk
  • %Recent%\sand-box.lnk
  • %Profile%\cdvttnfs.exe
  • %Temp%\001a6c071aa01eb0ff9077fd45d8e4f1.jpg


Viewing all articles
Browse latest Browse all 38585

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>