I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.
INSTHELP.EXE – Trojan Downloader removal
| File | MD5 | Virus Alias |
|---|---|---|
| INSTHELP.EXE | 8dd8a1445305454d31372254547c5b00 | Trojan Downloader |
| INSTHELP.EXE | 8dd8a1445305454d31372254547c5b00 | Trojan CI |
INSTHELP.EXE size: 118784 bytes
INSTHELP.EXE hash: 8DD8A1445305454D31372254547C5B00
Created files:
%Program Files%\ErrorSafe Free\EmtERSF.exe
%Program Files%\ErrorSafe Free\ESSPChck.dll
%Program Files%\ErrorSafe Free\FlFxr15.dll
%Program Files%\ErrorSafe Free\FRec.dll
%Program Files%\ErrorSafe Free\FWraper.dll
%Program Files%\ErrorSafe Free\FxCore.dll
%Program Files%\ErrorSafe Free\InstHelp.exe
%Program Files%\ErrorSafe Free\MMFx.dll
%Program Files%\ErrorSafe Free\uers.exe
%Program Files%\ErrorSafe Free\unins000.exe
%Program Files%\ErrorSafe Free\Updater.exe
%SysDir%\atl71.dll
%SysDir%\mfc71.dll
%SysDir%\msvcp71.dll
%SysDir%\msvcr71.dll
%Temp%\ErrorSafeScannerSetup.exe
Autostart registry keys:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Error Safe Free: %Program Files%\ErrorSafe Free\uers.exe /scan
Detected by UnHackMe:
INSTHELP.EXE
Default location: %PROGRAM FILES%\ERRORSAFE FREE\INSTHELP.EXE
Dropper information:
MD5: 05bd88a1e30b455386568c9654ec00d1
File size: 2229968 bytes