File Name
MD5
Detections i
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
loader.exe
f3a16fa61d62b459db2bae79b00653f2
1,408
+
Name:
loader.exe MD5:
f3a16fa61d62b459db2bae79b00653f2 Size:
300.03 KB (300032 bytes) Detections:
1,408
Type:
Executable File Path:
%SYSTEMDRIVE%\Users\<username>\Documents\ElfBot NG\loader.exe Group:
Malware file Last Updated:
March 24, 2026
ctfmontpq.exe
76b1e45abd8c9952f81a07bc06871084
214
+
Name:
ctfmontpq.exe MD5:
76b1e45abd8c9952f81a07bc06871084 Size:
10.75 KB (10752 bytes) Detections:
214
Type:
Executable File Path:
%WINDIR%\system32 Group:
Malware file Last Updated:
December 1, 2010
ctfmonmnl.exe
bbae4138033fea60c987ccc3cfd65da4
65
+
Name:
ctfmonmnl.exe MD5:
bbae4138033fea60c987ccc3cfd65da4 Size:
9.72 KB (9728 bytes) Detections:
65
Type:
Executable File Path:
%WINDIR%\system32 Group:
Malware file Last Updated:
December 1, 2010
ctfmontrr.exe
46595d07f2d49c0398b8493c502cf766
45
+
Name:
ctfmontrr.exe MD5:
46595d07f2d49c0398b8493c502cf766 Size:
11.26 KB (11264 bytes) Detections:
45
Type:
Executable File Path:
%WINDIR%\system32 Group:
Malware file Last Updated:
November 30, 2010
ctfmonfip.exe
7906f4c2bda4e4df20f36e84ddd66c6a
20
+
Name:
ctfmonfip.exe MD5:
7906f4c2bda4e4df20f36e84ddd66c6a Size:
10.24 KB (10240 bytes) Detections:
20
Type:
Executable File Path:
%WINDIR%\system32 Group:
Malware file Last Updated:
December 9, 2010
TBofrUXGjfVX.exe
168d183ca9c36dabf909f592a8de3a31
16
+
Name:
TBofrUXGjfVX.exe MD5:
168d183ca9c36dabf909f592a8de3a31 Size:
438.27 KB (438272 bytes) Detections:
16
Type:
Executable File Path:
%ALLUSERSPROFILE%\Datos de programa Group:
Malware file Last Updated:
December 17, 2012
ctfmonxca.exe
b36c632eaba8a3ee88b98372ed3f1485
14
+
Name:
ctfmonxca.exe MD5:
b36c632eaba8a3ee88b98372ed3f1485 Size:
9.72 KB (9728 bytes) Detections:
14
Type:
Executable File Path:
%WINDIR%\system32 Group:
Malware file Last Updated:
December 8, 2010
ctfmonnrw.exe
faae80f7abba4c431a7763d4efe8f59c
14
+
Name:
ctfmonnrw.exe MD5:
faae80f7abba4c431a7763d4efe8f59c Size:
9.72 KB (9728 bytes) Detections:
14
Type:
Executable File Path:
%WINDIR%\system32 Group:
Malware file Last Updated:
November 30, 2010
svchost.exe
eaa11b4aaf5b91dcffae50decc106098
12
+
Name:
svchost.exe MD5:
eaa11b4aaf5b91dcffae50decc106098 Size:
221.18 KB (221184 bytes) Detections:
12
Type:
Executable File Path:
%APPDATA%\dll Group:
Malware file Last Updated:
February 1, 2011
HyM Auto Stage.dll
9e2d5c100b54d5b34524d79e99be6158
10
+
Name:
HyM Auto Stage.dll MD5:
9e2d5c100b54d5b34524d79e99be6158 Size:
368.12 KB (368128 bytes) Detections:
10
Type:
Dynamic link library Path:
%USERPROFILE%\Escritorio\Auto_Stage Group:
Malware file Last Updated:
July 18, 2011
ctfmongie.exe
1a95c0296137e6cd4b65245a7613e0bd
8
+
Name:
ctfmongie.exe MD5:
1a95c0296137e6cd4b65245a7613e0bd Size:
10.24 KB (10240 bytes) Detections:
8
Type:
Executable File Path:
%WINDIR%\system32 Group:
Malware file Last Updated:
December 7, 2010
ctfmon_na.exe
63e3b940ef76b547590e7d14d2ff0e25
8
+
Name:
ctfmon_na.exe MD5:
63e3b940ef76b547590e7d14d2ff0e25 Size:
10.24 KB (10240 bytes) Detections:
8
Type:
Executable File Path:
%WINDIR%\system32 Group:
Malware file Last Updated:
December 7, 2010
ctfmonequ.exe
cda2f270621239e1e99439c33adcf797
7
+
Name:
ctfmonequ.exe MD5:
cda2f270621239e1e99439c33adcf797 Size:
10.75 KB (10752 bytes) Detections:
7
Type:
Executable File Path:
%WINDIR%\system32 Group:
Malware file Last Updated:
February 3, 2011
ctfmonvep.exe
de3bd70065988d00666f3d872ef37f01
7
+
Name:
ctfmonvep.exe MD5:
de3bd70065988d00666f3d872ef37f01 Size:
10.24 KB (10240 bytes) Detections:
7
Type:
Executable File Path:
%WINDIR%\system32 Group:
Malware file Last Updated:
December 7, 2010
svehost.exe
92ae7b493bdbb17ffa7a932a437df36a
6
+
Name:
svehost.exe MD5:
92ae7b493bdbb17ffa7a932a437df36a Size:
5.24 MB (5242880 bytes) Detections:
6
Type:
Executable File Path:
%APPDATA%\whitepixel Group:
Malware file Last Updated:
September 1, 2011
Direct9x.exe
069bc3e11da9a704b2619938b632a156
5
+
Name:
Direct9x.exe MD5:
069bc3e11da9a704b2619938b632a156 Size:
1.26 MB (1261856 bytes) Detections:
5
Type:
Executable File Path:
%ALLUSERSPROFILE%\Application Data Group:
Malware file Last Updated:
October 25, 2012
lsass.exe
7d2ef8437c73fcbebae317d3f4bea5ad
4
+
Name:
lsass.exe MD5:
7d2ef8437c73fcbebae317d3f4bea5ad Size:
97.79 KB (97792 bytes) Detections:
4
Type:
Executable File Path:
%APPDATA%\SystemProc Group:
Malware file Last Updated:
February 28, 2011
ctfmonltt.exe
f7022df920a571a63422d85ba9b1d54f
4
+
Name:
ctfmonltt.exe MD5:
f7022df920a571a63422d85ba9b1d54f Size:
9.72 KB (9728 bytes) Detections:
4
Type:
Executable File Path:
%WINDIR%\system32 Group:
Malware file Last Updated:
December 7, 2010
ctfmonpho.exe
357de68372dc0426ce852f69f085dc40
4
+
Name:
ctfmonpho.exe MD5:
357de68372dc0426ce852f69f085dc40 Size:
10.24 KB (10240 bytes) Detections:
4
Type:
Executable File Path:
%WINDIR%\system32 Group:
Malware file Last Updated:
December 7, 2010
gKXWm.exe
749a46a4caeb1df0be8908fb89f82a98
4
+
Name:
gKXWm.exe MD5:
749a46a4caeb1df0be8908fb89f82a98 Size:
5.24 MB (5242880 bytes) Detections:
4
Type:
Executable File Path:
%USERPROFILE%\Application Data Group:
Malware file Last Updated:
January 1, 2012
sqlservr.exe
a82defb742746f955ed3fb63afa30534
3
+
Name:
sqlservr.exe MD5:
a82defb742746f955ed3fb63afa30534 Size:
1.62 MB (1620992 bytes) Detections:
3
Type:
Executable File Path:
%WINDIR%\Tasks Group:
Malware file Last Updated:
March 20, 2012
CyberClient.exe
e6b8584bc327f2c5793b6fa66d6d3be2
3
+
Name:
CyberClient.exe MD5:
e6b8584bc327f2c5793b6fa66d6d3be2 Size:
198.14 KB (198144 bytes) Detections:
3
Type:
Executable File Path:
C:\Billing\CyberClient.exe Group:
Malware file Last Updated:
November 19, 2021
RSGP.exe
32338bbe21e528040be17aee9807d3dd
3
+
Name:
RSGP.exe MD5:
32338bbe21e528040be17aee9807d3dd Size:
203.26 KB (203264 bytes) Detections:
3
Type:
Executable File Path:
%APPDATA%\Microsoft\Windows\Start Menu\Programs Group:
Malware file Last Updated:
January 19, 2012
763952f524435d07cca5fb4fa69b270c5724b7068fda64d8a13737a2c1f150c2
b15645bdfbe46f9bfce972c917748856
3
+
Name:
763952f524435d07cca5fb4fa69b270c5724b7068fda64d8a13737a2c1f150c2 MD5:
b15645bdfbe46f9bfce972c917748856 Size:
313.85 KB (313856 bytes) Detections:
3
Path:
E:\5535313715560448\763952f524435d07cca5fb4fa69b270c5724b7068fda64d8a13737a2c1f150c2 Group:
Malware file Last Updated:
June 30, 2021
0047.DLL
7b9b3841382ef1a0faef1a9a05877182
3
+
Name:
0047.DLL MD5:
7b9b3841382ef1a0faef1a9a05877182 Size:
37.37 KB (37376 bytes) Detections:
3
Type:
Dynamic link library Path:
%WINDIR%\system32 Group:
Malware file Last Updated:
December 8, 2010
vip.exe
3da148ae960580ce3f6018612393d94a
2
+
Name:
vip.exe MD5:
3da148ae960580ce3f6018612393d94a Size:
456.7 KB (456704 bytes) Detections:
2
Type:
Executable File Path:
%USERPROFILE%\Desktop Group:
Malware file Last Updated:
January 21, 2013
ctfmondyt.exe
21ecb217a7ef92438a12d2c16f318b5a
2
+
Name:
ctfmondyt.exe MD5:
21ecb217a7ef92438a12d2c16f318b5a Size:
9.72 KB (9728 bytes) Detections:
2
Type:
Executable File Path:
%WINDIR%\system32 Group:
Malware file Last Updated:
December 8, 2010
svchost.exe
495d923b5c9b0e4d47329c5f9602a752
2
+
Name:
svchost.exe MD5:
495d923b5c9b0e4d47329c5f9602a752 Size:
1.19 MB (1198592 bytes) Detections:
2
Type:
Executable File Path:
%WINDIR%\system32\system Group:
Malware file Last Updated:
December 6, 2010
timelock.exe
6415d2e978e7a765a45bf177beb1bb54
2
+
Name:
timelock.exe MD5:
6415d2e978e7a765a45bf177beb1bb54 Size:
1.02 MB (1028096 bytes) Detections:
2
Type:
Executable File Path:
C:\Time Lock Group:
Malware file Last Updated:
December 6, 2010
winlogon.exe
346f300fbac5fa30fe6ebe341f371f8d
1
+
Name:
winlogon.exe MD5:
346f300fbac5fa30fe6ebe341f371f8d Size:
5.97 MB (5976064 bytes) Detections:
1
Type:
Executable File Path:
%USERPROFILE%\Application Data Group:
Malware file Last Updated:
November 25, 2011
winlogon.exe
1d0525b2ed927dfb44ca1cd23db743df
1
+
Name:
winlogon.exe MD5:
1d0525b2ed927dfb44ca1cd23db743df Size:
4.5 MB (4508672 bytes) Detections:
1
Type:
Executable File Path:
%USERPROFILE%\Application Data Group:
Malware file Last Updated:
November 28, 2011
SI090_289.exe
577d159339cf11c5a8cefce2b44da373
1
+
Name:
SI090_289.exe MD5:
577d159339cf11c5a8cefce2b44da373 Size:
3.73 MB (3739136 bytes) Detections:
1
Type:
Executable File Path:
%ALLUSERSPROFILE%\Anwendungsdaten\090a91 Group:
Malware file Last Updated:
February 7, 2011
Live.exe
e1d12bb7843ad2adffe329f9a02e77b0
1
+
Name:
Live.exe MD5:
e1d12bb7843ad2adffe329f9a02e77b0 Size:
338.94 KB (338944 bytes) Detections:
1
Type:
Executable File Path:
%SystemDrive%\Shoslop Group:
Malware file Last Updated:
April 19, 2012
ctfmoncgb.exe
a58d8e8fd186f5d9ac090ab67be54cc2
1
+
Name:
ctfmoncgb.exe MD5:
a58d8e8fd186f5d9ac090ab67be54cc2 Size:
10.24 KB (10240 bytes) Detections:
1
Type:
Executable File Path:
%WINDIR%\system32 Group:
Malware file Last Updated:
December 7, 2010
ctfmonfzy.exe
e82110a080a2e0b211ac00f968c548c6
1
+
Name:
ctfmonfzy.exe MD5:
e82110a080a2e0b211ac00f968c548c6 Size:
10.75 KB (10752 bytes) Detections:
1
Type:
Executable File Path:
%WINDIR%\system32 Group:
Malware file Last Updated:
December 7, 2010
CNC190C32.dll
5ed18632b1278c9c2a6c2749e8453361
1
+
Name:
CNC190C32.dll MD5:
5ed18632b1278c9c2a6c2749e8453361 Size:
313.34 KB (313344 bytes) Detections:
1
Type:
Dynamic link library Path:
%WINDIR%\system32 Group:
Malware file Last Updated:
December 8, 2010
hfphwxho.exe
d1ca9e6791bacdc26a020903f3b587e6
1
+
Name:
hfphwxho.exe MD5:
d1ca9e6791bacdc26a020903f3b587e6 Size:
1.43 MB (1432064 bytes) Detections:
1
Type:
Executable File Path:
%ALLUSERSPROFILE% Group:
Malware file Last Updated:
July 23, 2012
hstvbldh.exe
cd79e7a8c3ebeb2cdbff948466444547
1
+
Name:
hstvbldh.exe MD5:
cd79e7a8c3ebeb2cdbff948466444547 Size:
6.2 MB (6203264 bytes) Detections:
1
Type:
Executable File Path:
%ALLUSERSPROFILE% Group:
Malware file Last Updated:
September 10, 2012
ctfmondjt.exe
fd7a983ed3c7b9dcce84774948917f98
1
+
Name:
ctfmondjt.exe MD5:
fd7a983ed3c7b9dcce84774948917f98 Size:
10.24 KB (10240 bytes) Detections:
1
Type:
Executable File Path:
%WINDIR%\system32 Group:
Malware file Last Updated:
July 27, 2011
Wmiproe.exe
b08cb89d11931171e6251ad956086cd2
0
+
Name:
Wmiproe.exe MD5:
b08cb89d11931171e6251ad956086cd2 Size:
16.38 KB (16384 bytes) Detections:
0
Type:
Executable File Group:
Malware file Last Updated:
December 11, 2009
crypt16.exe
75257afed440d1fca858304e65a7be4b
0
+
Name:
crypt16.exe MD5:
75257afed440d1fca858304e65a7be4b Size:
48.12 KB (48128 bytes) Detections:
0
Type:
Executable File Group:
Malware file Last Updated:
December 11, 2009
smss.exe
95bcfc0ff05e809c9a790c17e019bbdf
0
+
Name:
smss.exe MD5:
95bcfc0ff05e809c9a790c17e019bbdf Size:
40.96 KB (40960 bytes) Detections:
0
Type:
Executable File Group:
Malware file Last Updated:
January 8, 2010