Remove Emcodec. Description and removal instructions

Title: Emcodec
Type: Trojans	Severity scale: (47 / 100)

Emcodec pretends to be an installer for eMedia Codec, which is a fake codec for Windows Media Player. However, it is also a trojan that drops a widely spread parasite related to SpywareQuake and SpyFalcon infections. Once executed, the threat displays the setup screen. Then it installs itself to the system along with another parasite. After a while, Emocdec executes that parasite and deletes some of its own files.

FORUM:
Discuss Emcodec in
spyware removal forum

Emcodec properties:
• Stays resident in background

Automatic Emcodec removal:

remover for Emcodec

Emcodec manual removal:

Kill processes:
dfrgsrv.exe, ecodec.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_CLASSES_ROOT\EMediaCodec.Chl
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eMedia Codec

HELP:
how to remove registry entries

Delete files:
dfrgsrv.exe, ecodec.exe

HELP:
how to remove harmful files

Delete directories:
C:\Program Files\eMedia Codec
Misc:
Exact file location:
ecodec.exe - C:\Program Files\eMedia Codec
dfrgsrv.exe - C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32

Other programs to remove Emcodec:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 06/04/06
Information updated: 06/04/06

Additional resources related to Emcodec:

Attention: If you know or you have a website or page about Emcodec removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about Emcodec parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.