How To Remove ErrorSafe

What is ErrorSafe?

ErrorSafe is marketed as a tool to help you perform several PC maintenance tasks, such as cleaning your registry, fixing corrupt files, performing disk cleanups and resolving hard disk errors. In reality it is a malicious adware software. The promotional advertising program used by this tool is intrusive and is installed on your computer without your consent. Just like most of the other adware programs, ErrorSafe may either stealthily install on your computer or may come bundled with another Freeware program.

What happens when a PC is infected with ErrorSafe?

The most common symptom of ErrorSafe infection is the popup ads that are displayed in message boxes that look similar to Windows error and warning message boxes. These message boxes may contain advertising information that may prompt users to download and use ErrorSafe to fix various problems with their Windows computer.

These message boxes may contain advertising information similar to the text given below:

NOTICE: If your computer has errors in the registry database of file system, it could cause unpredictable or erratic behavior, freezes and crashes.

Fixing these errors can increase your computer's performance and prevent data loss.

Would you like to install ErrorSafe to check your computer for free? (Recommended)

How to remove ErrorSafe

It is impossible to completely remove ErrorSafe with the help of the Add or Remove Programs. The malicious tool is also designed to evade several adware programs. This is the reason why, the best way to get rid of this malicious adware program is to use an efficient antispyware tool, such as Spyware Cease or Norton Antivirus. To ensure that your removal process is efficient, update your antispyware tool and then run a full system scan by starting your computer in Safe Mode.

How to remove ErrorSafe manually

The manual removal process of ErrorSafe is quite tedious and requires a lot of work. However, if you want to do it yourself, you may follow the steps listed below:

Step 1: Stop ErrorSafe Processes:

Press Ctrl + Alt + Del to open the Task Manager and on the Processes tab, find the following ErrorSafe processes. Select each process one by one and then select the End Task button to stop them.

  • df_kme.exe
  • errorsafescannerinstall_de.exe
  • errorsafescannersetup2222.exe
  • ers.exe
  • install.exe
  • sr.exe
  • unins000.exe
  • unins001.exe

Step 2: Unregister ErrorSafe DLL files:

Open Windows Explorer and then search for the following files:

  • df_fixer.dll
  • df_proxy.dll
  • ecc.dll
  • espcheck.dll
  • esspcheck.dll
  • ffwraper.dll
  • fixcore.dll
  • flfxr5.dll
  • ftrec.dll
  • mmfix.dll
  • strres.dll

Write down the full path to each of these files and then use the regsvr32 /u Fullpath/DLL_Name command to unregister the DLLs.

Step 3: Delete ErrorSafe process and DLL files:

After you have stopped ErrorSafe processes and unregistered the DLL files, open Windows Explorer and then search for the following ErrorSafe files and delete them.

  • df_fixer.dll
  • df_kme.exe
  • df_proxy.dll
  • ecc.dll
  • errorsafescannerinstall_de.exe
  • errorsafescannersetup2222.exe
  • ers.exe
  • espcheck.dll
  • esspcheck.dll
  • ffwraper.dll
  • fixcore.dll
  • flfxr5.dll
  • ftrec.dll
  • install.exe
  • lapv.dat
  • license.rtf
  • lock.dat
  • mmfix.dll
  • program.sav
  • pv.dat
  • sr.exe
  • sr.log
  • strres.dll
  • support.url
  • template.dbx
  • trace.log
  • unins000.dat
  • unins000.exe
  • unins001.exe

Step 4: Delete ErrorSafe registry entries:

Warning: The following steps require you to delete a lot of information from the Windows registry. To prevent any problems, it is recommended that you make a back up of the registry before performing these steps.

  1. Run the regedit command to open the Registry Editor window.
  2. Here, navigate to the following registry entry:

    3. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

  3. Delete the following value:

    4. “ErrorSafe” = “%ProgramFiles%\ErrorSafe\ers.exe /scan”

  4. Next, navigate to the following registry entry:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs

  5. Delete the following value:

    6. “%ProgramFiles%\ErrorSafe\esPCheck.dll” = “1”

  6. Next, navigate to the following registry entries and delete them:
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{05324ED1-05C0-4e3a-A34F-98BFC64426F5}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{184B0A26-4C9C-4757-ABF5-4B6AF71F9A45}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{18A41B20-E519-47a1-B545-FFC200730E9B}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{250D1063-5414-4fb0-86D5-AABB7A5D7DA7}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2B334C22-40CA-438f-913A-61A8105C4CCD}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{43DB73EB-4C90-4418-B6AD-10DB22016908}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4AA76F27-81BC-4C3F-9F24-CB99349C8CC9}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4F4E2384-42AD-4fe4-B966-B6D50C7BF90A}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5284AC2A-EF00-4750-9B82-B5B907D26536}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{59399E33-FB54-48AB-8AE4-AE108B36DAB4}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6AE7418B-229F-4A2C-AE1B-D5962888F02D}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7D435027-F646-4bf9-B2C5-0EF4940D5CA2}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8DAE9202-0019-4D30-A5D2-AAF02D4DDC37}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C833A552-F5AF-4a7b-87B3-6EBDE0DB3B43}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EDF78E1B-31A2-4c6e-AD40-0AFCD0D55263}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F5AB293C-2E21-4441-9AD8-B3646EB26DF5}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0D146B7F-FA35-465D-B716-BCBC1F9A92D3}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{12813770-461E-4A9F-8C5B-C227A8E9FBE8}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1562D24E-F5BF-4BB4-AF4C-BBB610B62638}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2A1647E8-3EC2-49FE-B632-E12D765FA0CC}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2DECFCC9-D910-4BAC-94B8-FC006827A60F}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{4AA76F27-81BC-4C3F-9F24-CB99349C8CC9}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{59399E33-FB54-48AB-8AE4-AE108B36DAB4}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6813BFFD-BE81-4613-B4E6-AA7ED0DA8659}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7CA36000-3320-49D1-BAD1-4C5169D4084A}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7E7A1949-5C0C-45F3-A106-34FE038493EF}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8DAE9202-0019-4D30-A5D2-AAF02D4DDC37}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A0E2E5AB-C02F-489B-BD7B-58C329F774F3}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A92616B1-2E82-4052-B579-0A40C2304380}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{CF5C9FCE-C963-49E5-A3A4-0A81FFFE1E55}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D090E12D-B79C-4B82-A76C-0E3BBE73C9EF}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D80A56D7-451C-41CF-9A74-1447E0887B97}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E0110779-5F79-4685-9C96-9D99EFD30CA2}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E7CCBD19-2EEA-4B6A-B9BE-E8A68613809C}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EA0F107F-2BF6-44A0-96C4-A99B74AFBC4A}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F709F572-86F5-47C8-AFCF-3CEBC468FADB}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F97E5B38-4887-444A-86F5-91C18331500B}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{16DEEE6B-AEFC-4BA6-9F32-57BBE6783A7C}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{21C724D0-B91A-4F35-99E7-55D325F00B20}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{68BC55E9-4D3E-4C89-89AC-7559763C98B8}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{692CA430-32C8-470D-BA1F-7E15E21E7043}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{8ECC09E1-634B-42AC-8BE7-E6EDBB53C90E}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B869788C-35DF-4104-BACB-8FDB83AFFFFD}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{BD9421BB-9F96-4272-802F-49BEC746056E}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F874A0AE-66E8-426B-A3F5-6BA6958DCDBA}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ESCompCleanCore.ESAppCleaner
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ESCompCleanCore.ESAppCleaner.1
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ESCompCleanCore.ESCCQuickScan
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ESCompCleanCore.ESCCQuickScan.1
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ESCompCleanCore.ESFileCleaner
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ESCompCleanCore.ESFileCleaner.1
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ESCompCleanCore.ESInetCleaner
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ESCompCleanCore.ESInetCleaner.1
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ESCompCleanCore.ESRegCleaner
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ESCompCleanCore.ESRegCleaner.1
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ESCompCleanCore.ESSystemCleaner
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ESCompCleanCore.ESSystemCleaner.1
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ESdf_fixer.ESFixer
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ESdf_fixer.ESFixer.1
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ESdf_proxy.ESDriverManipulate
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ESdf_proxy.ESDriverManipulate.1
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ESFFWraper.ESFFEnginWraper
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ESFFWraper.ESFFEnginWraper.1
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ESFixCore.ESMMFixCore
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ESFixCore.ESMMFixCore.1
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ESMMFixCtrl.ESCoFixEngine
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ESMMFixCtrl.ESCoFixEngine.1
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ESSPCheck.ESSPCheck
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ESSPCheck.ESSPCheck.1
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FlFxr5.FlFixer5
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ERS_is1
  • HKEY_LOCAL_MACHINE\SOFTWARE\ErrorSafe
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ersd.sys
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ersd.sys
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ERSD
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ersd
  • HKEY_CURRENT_USER\Software\ErrorSafe

As you can see, the manual removal process is quite tedious and prone to errors. Therefore, as mentioned above, a good Antispyware tool, such as Spyware Cease is the best way to remove the ErrorSafe spyware. It is also recommended that you use a trustworthy and efficient tool, such as RegServe to clean your registry and remove any left behind spyware entries from it.