Remove Ertfor. Description and removal instructions

 
Title: Ertfor
Also known as: Trojan.Ertfor
Type: Trojans
Severity scale:Ertfor severity is 32  (32 / 100)
 
Ertfor is a Trojan virus that may infect your computer with malicious programs or aggressive advertisements. Usually, this Trojan is unknowingly downloaded from unsecure websites or by opening an infected email attachment. It relies on randomized process and resource names, that's why in some cases it might be difficult to detect and remove this parasite. In order to completely remove Ertfor from your computer, please use the removal guide below.


Related files: [randomized char. string].exe, a6gt9v9.exe, zxhstn.exe, [randomized char. string].dll, hsari3jndsbfi73.dll, sdfadccddkn93.dll

Ertfor properties:
• Shows commercial adverts
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic Ertfor removal:

remover for Ertfor

Ertfor manual removal:

Kill processes:
[randomized char. string].exe a6gt9v9.exe zxhstn.exe
Delete registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run@^lrijh8s73jhbfgfd
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run@^lrijh8s73jhbfgfd
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler@^{C6C7B2A1-00F3-42BD-F434-00AABA2C8953}
HKEY_CLASSES_ROOT\CLSID\{A5AF42A3-94F3-42BD-F634-0604832C897D}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A5AF42A3-94F3-42BD-F634-0604832C897D}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5AF42A3-94F3-42BD-F634-0604832C897D}
HKEY_CLASSES_ROOT\CLSID\{C2BA40A1-74F3-42BD-F434-12345A2C8953}
HKEY_CLASSES_ROOT\CLSID\{C6C7B2A1-00F3-42BD-F434-00AABA2C8953}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C2BA40A1-74F3-42BD-F434-12345A2C8953}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C6C7B2A1-00F3-42BD-F434-00AABA2C8953}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C2BA40A1-74F3-42BD-F434-12345A2C8953}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C6C7B2A1-00F3-42BD-F434-00AABA2C8953}

Unregister DLLs:
[randomized char. string].dll hsari3jndsbfi73.dll sdfadccddkn93.dll

Delete files:
[randomized char. string].exe a6gt9v9.exe zxhstn.exe [randomized char. string].dll hsari3jndsbfi73.dll sdfadccddkn93.dll

Other programs to remove Ertfor:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 25/06/09
Information updated: 25/06/09

Additional resources related to Ertfor:

Attention: If you know or you have a website or page about Ertfor removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about Ertfor parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites: