Solved! Use ESSPCHCK.DLL (Trojan Siggen) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

ESSPCHCK.DLL – Trojan Siggen removal

File MD5 Virus Alias
ESSPCHCK.DLL 557d921ba6c479df0f290a8b52c6b149 Trojan Siggen
ESSPCHCK.DLL 557d921ba6c479df0f290a8b52c6b149 Trojan Agent
ESSPCHCK.DLL 557d921ba6c479df0f290a8b52c6b149 Trojan FakeAV

ESSPCHCK.DLL size: 33792 bytes
ESSPCHCK.DLL hash: 557D921BA6C479DF0F290A8B52C6B149

Created files:

%Program Files%\ErrorSafe Free\EmtERSF.exe
%Program Files%\ErrorSafe Free\ESSPChck.dll
%Program Files%\ErrorSafe Free\FlFxr15.dll
%Program Files%\ErrorSafe Free\FRec.dll
%Program Files%\ErrorSafe Free\FWraper.dll
%Program Files%\ErrorSafe Free\FxCore.dll
%Program Files%\ErrorSafe Free\InstHelp.exe
%Program Files%\ErrorSafe Free\MMFx.dll
%Program Files%\ErrorSafe Free\uers.exe
%Program Files%\ErrorSafe Free\unins000.exe
%Program Files%\ErrorSafe Free\Updater.exe
%SysDir%\atl71.dll
%SysDir%\mfc71.dll
%SysDir%\msvcp71.dll
%SysDir%\msvcr71.dll
%Temp%\ErrorSafeScannerSetup.exe

Autostart registry keys:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Error Safe Free: %Program Files%\ErrorSafe Free\uers.exe /scan

Detected by UnHackMe:

ESSPCHCK.DLL
Default location: %PROGRAM FILES%\ERRORSAFE FREE\ESSPCHCK.DLL

Dropper information:
MD5: 05bd88a1e30b455386568c9654ec00d1
File size: 2229968 bytes

Leave a Reply