Ertfor manual removal:
Kill processes:
[randomized char. string].exe a6gt9v9.exe zxhstn.exe
Delete registry values:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run@^lrijh8s73jhbfgfd
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run@^lrijh8s73jhbfgfd
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler@^{C6C7B2A1-00F3-42BD-F434-00AABA2C8953}
HKEY_CLASSES_ROOT\CLSID\{A5AF42A3-94F3-42BD-F634-0604832C897D}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A5AF42A3-94F3-42BD-F634-0604832C897D}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5AF42A3-94F3-42BD-F634-0604832C897D}
HKEY_CLASSES_ROOT\CLSID\{C2BA40A1-74F3-42BD-F434-12345A2C8953}
HKEY_CLASSES_ROOT\CLSID\{C6C7B2A1-00F3-42BD-F434-00AABA2C8953}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C2BA40A1-74F3-42BD-F434-12345A2C8953}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C6C7B2A1-00F3-42BD-F434-00AABA2C8953}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C2BA40A1-74F3-42BD-F434-12345A2C8953}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C6C7B2A1-00F3-42BD-F434-00AABA2C8953}
Unregister DLLs:[randomized char. string].dll hsari3jndsbfi73.dll sdfadccddkn93.dll
Delete files:[randomized char. string].exe a6gt9v9.exe zxhstn.exe [randomized char. string].dll hsari3jndsbfi73.dll sdfadccddkn93.dll
Post Comment:
Attention: Use this form only if you have additional information about Ertfor parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.