Solved! Use DSRLTE.EXE (Trojan Artemis) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

DSRLTE.EXE – Trojan Artemis removal

FileMD5Virus Alias
DSRLTE.EXE 2b93a9a249d744950c52519d78d00216 Trojan Artemis
DSRLTE.EXE 2b93a9a249d744950c52519d78d00216 Trojan UnwantedProgram
DSRLTE.EXE 2b93a9a249d744950c52519d78d00216 Trojan Generic
DSRLTE.EXE 2b93a9a249d744950c52519d78d00216 Trojan Eldorado
DSRLTE.EXE 2b93a9a249d744950c52519d78d00216 Adware Downware
DSRLTE.EXE 2b93a9a249d744950c52519d78d00216 Trojan Downloader

DSRLTE.EXE size: 660736 bytes
DSRLTE.EXE hash: 2B93A9A249D744950C52519D78D00216

Created files:

%Program Files%\Pay-By-Ads\Yahoo! Search\1.3.26.12\chromext64.dll
%Program Files%\Pay-By-Ads\Yahoo! Search\1.3.26.12\dsrlte.exe
%Program Files%\Pay-By-Ads\Yahoo! Search\1.3.26.12\dsrsetup.exe
%Program Files%\Pay-By-Ads\Yahoo! Search\1.3.26.12\hlpr64.exe
%Program Files%\Pay-By-Ads\Yahoo! Search\1.3.26.12\res.dll
%Program Files%\Pay-By-Ads\Yahoo! Search\1.3.26.12\uckpdfcS.dll
%Program Files%\Pay-By-Ads\Yahoo! Search\1.3.26.12\Xmnjnyfx.dll
%AppData%\Microsoft\CryptnetUrlCache\Content\34DA60AA966CD9270C5362E6AEF824CF
%AppData%\Microsoft\CryptnetUrlCache\Content\74FBF93595CFC8459196065CE54AD928
%AppData%\Microsoft\CryptnetUrlCache\MetaData\34DA60AA966CD9270C5362E6AEF824CF
%AppData%\Microsoft\CryptnetUrlCache\MetaData\74FBF93595CFC8459196065CE54AD928

Detected by UnHackMe:

DSRLTE.EXE
Default location: %PROGRAM FILES%\PAY-BY-ADS\YAHOO! SEARCH\1.3.26.12\DSRLTE.EXE

Dropper information:
MD5: eee9ea850aa8dce4b76c8b94352aa000
File size: 1203968 bytes

Leave a Reply