Solved! Use FORTER.SYS (Trojan Agent) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

FORTER.SYS – Trojan Agent removal

FileMD5Virus Alias
FORTER.SYS b3f1ac8b2f68d2134822d8ec1d9d4755 Trojan Agent
FORTER.SYS b3f1ac8b2f68d2134822d8ec1d9d4755 Trojan Generic
FORTER.SYS b3f1ac8b2f68d2134822d8ec1d9d4755 Trojan Downloader

FORTER.SYS size: 5120 bytes
FORTER.SYS hash: B3F1AC8B2F68D2134822D8EC1D9D4755

Created files:

C:\booter.exe
C:\DelInfo.bin
%TEMP%\Forter.sys

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\bits\Start: 02000000
HKLM\System\CurrentControlSet\Services\Forter\Type: 01000000
HKLM\System\CurrentControlSet\Services\Forter\Start: 03000000
HKLM\System\CurrentControlSet\Services\Forter\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\Forter\DisplayName: Forter
HKLM\System\CurrentControlSet\Services\Forter\ImagePath: %TEMP%\Forter.sys

Detected by UnHackMe:

FORTER.SYS
Default location: %TEMP%\FORTER.SYS

Dropper information:
MD5: a9695eecab156f4cbf10830a3cd0d289
File size: 310784 bytes

Leave a Reply