Solved! Use EMTERSF.EXE (Trojan Agent) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

EMTERSF.EXE – Trojan Agent removal

File MD5 Virus Alias
EMTERSF.EXE 477d81474cf1766c28f86d7738ee1ddb Trojan Agent
EMTERSF.EXE 477d81474cf1766c28f86d7738ee1ddb Trojan, Suspicious File
EMTERSF.EXE 477d81474cf1766c28f86d7738ee1ddb Trojan Generic
EMTERSF.EXE 477d81474cf1766c28f86d7738ee1ddb Trojan Downloader
EMTERSF.EXE 477d81474cf1766c28f86d7738ee1ddb Trojan CI
EMTERSF.EXE 477d81474cf1766c28f86d7738ee1ddb Trojan FakeAV

EMTERSF.EXE size: 2048 bytes
EMTERSF.EXE hash: 477D81474CF1766C28F86D7738EE1DDB

Created files:

%Program Files%\ErrorSafe Free\EmtERSF.exe
%Program Files%\ErrorSafe Free\ESSPChck.dll
%Program Files%\ErrorSafe Free\FlFxr15.dll
%Program Files%\ErrorSafe Free\FRec.dll
%Program Files%\ErrorSafe Free\FWraper.dll
%Program Files%\ErrorSafe Free\FxCore.dll
%Program Files%\ErrorSafe Free\InstHelp.exe
%Program Files%\ErrorSafe Free\MMFx.dll
%Program Files%\ErrorSafe Free\uers.exe
%Program Files%\ErrorSafe Free\unins000.exe
%Program Files%\ErrorSafe Free\Updater.exe
%SysDir%\atl71.dll
%SysDir%\mfc71.dll
%SysDir%\msvcp71.dll
%SysDir%\msvcr71.dll
%Temp%\ErrorSafeScannerSetup.exe

Autostart registry keys:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Error Safe Free: %Program Files%\ErrorSafe Free\uers.exe /scan

Detected by UnHackMe:

EMTERSF.EXE
Default location: %PROGRAM FILES%\ERRORSAFE FREE\EMTERSF.EXE

Dropper information:
MD5: 05bd88a1e30b455386568c9654ec00d1
File size: 2229968 bytes

Leave a Reply