Home Malware Programs Adware eTranslator

eTranslator

Posted: September 16, 2014

Threat Metric

Ranking: 9,967
Threat Level: 2/10
Infected PCs: 153,696
First Seen: September 16, 2014
Last Seen: February 22, 2025
OS(es) Affected: Windows


eTranslator may sometimes be seen as a useful browser add-on, which gives users the ability to translate text from one language to another. The tool is undoubtedly helpful, but you should not forget that services like Google Translate can provide you with access to the same feature without asking you to install any software on your computer. The installer of eTranslator reveals that the extension is compatible with Opera, Firefox, Google Chrome, and Internet Explorer so that it is safe to assume that just about any Windows users may encounter this extension at some point.

Unfortunately, the installation of eTranslator also may cause an unwanted side effect, which is likely to be hated by anyone. This extension tends to insert partner advertisements and marketing content into Web browser sessions, therefore exposing users to more ads than they are used to seeing.

eTranslator is not considered to be a harmful application and, in fact, users who are able to tolerate the ads it displays might end up being happy with the features eTranslator has to offer. However, don't forget that adware applications may often display ads coming from unverified partners, companies, and individuals, and this might often mean that their ads may contain dubious content, shady offers, and even fake products or services. The recommendation is to keep away from untrustworthy ads, especially if you suspect that they were brought to your Web browser by a 3rd-party application.

It seems like eTranslator does not use any self-preservation techniques, and this might make it possible for users to uninstall the application via the Windows Control Panel manually. However, users who are not comfortable with manual removal can rest assured that running a reputable cyber security application will help them eliminate all of the eTranslator's files automatically.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



C:\Users\<username>\AppData\Local\Temp\wqIj7XKuW6oi.exe File name: wqIj7XKuW6oi.exe
Size: 2.36 MB (2369056 bytes)
MD5: 03a8c7a54c55bc6445842ad0d7aa0d33
Detection count: 7,549
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\AppData\Local\Temp\wqIj7XKuW6oi.exe
Group: Malware file
Last Updated: March 28, 2022
C:\Users\<username>\AppData\Local\Temp\{33538C4D-C9F1-44DE-8136-FBD03B31CAB1}\etranslator_gui-5.exe File name: etranslator_gui-5.exe
Size: 3.54 MB (3548163 bytes)
MD5: 37db8d470aa4e8e13737e7d8e56a1cd9
Detection count: 7,303
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\AppData\Local\Temp\{33538C4D-C9F1-44DE-8136-FBD03B31CAB1}\etranslator_gui-5.exe
Group: Malware file
Last Updated: February 21, 2022
C:\Users\<username>\AppData\Local\Temp\8B77AFDE-5DB1-4027-A3EA-38D59A7BAB40.exe File name: 8B77AFDE-5DB1-4027-A3EA-38D59A7BAB40.exe
Size: 3.46 MB (3466148 bytes)
MD5: 2a6c7a988c70c314459990eb70986329
Detection count: 5,544
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\AppData\Local\Temp\8B77AFDE-5DB1-4027-A3EA-38D59A7BAB40.exe
Group: Malware file
Last Updated: November 24, 2021
C:\Users\<username>\AppData\Local\Temp\{C4FCBA24-7120-4370-8098-1C37336DB1D5}\etranslator-5.exe File name: etranslator-5.exe
Size: 2.9 MB (2904845 bytes)
MD5: 0b0758246efdea98e2ce516d68069f92
Detection count: 4,520
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\AppData\Local\Temp\{C4FCBA24-7120-4370-8098-1C37336DB1D5}\etranslator-5.exe
Group: Malware file
Last Updated: February 22, 2022
C:\Users\<username>\AppData\Local\Temp\{C2C4FF51-4495-4189-88E6-DDD8078EC9D4}\et2407.exe File name: et2407.exe
Size: 2.36 MB (2369056 bytes)
MD5: e912d3b13a124f7b592a6e76717cdeaa
Detection count: 3,977
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\AppData\Local\Temp\{C2C4FF51-4495-4189-88E6-DDD8078EC9D4}\et2407.exe
Group: Malware file
Last Updated: October 20, 2021
c:\windows\servicemgr.sys File name: servicemgr.sys
Size: 57.07 KB (57072 bytes)
MD5: 51dffa6eafe904d0d4e03756bcbc5834
Detection count: 857
File type: System file
Mime Type: unknown/sys
Path: c:\windows\servicemgr.sys
Group: Malware file
Last Updated: March 29, 2024
C:\Program Files (x86)\ScreenUp\future_helper.exe File name: future_helper.exe
Size: 606.72 KB (606720 bytes)
MD5: b13d7de61963b1fd10d0a19cc4372320
Detection count: 426
File type: Executable File
Mime Type: unknown/exe
Path: C:\Program Files (x86)\ScreenUp\future_helper.exe
Group: Malware file
Last Updated: October 24, 2021
%LOCALAPPDATA%\translatemgr\translatemgr.exe File name: translatemgr.exe
Size: 168.96 KB (168960 bytes)
MD5: 7d172bc1bbfb6dd000ec49b743f303b5
Detection count: 251
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%\translatemgr
Group: Malware file
Last Updated: March 11, 2017
%APPDATA%\iSmileg\iSmileg.exe File name: iSmileg.exe
Size: 3.18 MB (3185664 bytes)
MD5: 613d55274c5866af7f8a610cd19cd3a7
Detection count: 152
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\iSmileg
Group: Malware file
Last Updated: March 25, 2016
%PROGRAMFILES(x86)%\Translate Mgr\e2ru.exe File name: e2ru.exe
Size: 584.03 KB (584032 bytes)
MD5: a1697aff782a8d128964365c0e7ffe52
Detection count: 84
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Translate Mgr
Group: Malware file
Last Updated: June 15, 2016
C:\Users\<username>\AppData\Local\Temp\{F8D9CEC1-52B0-4526-B3D9-AC9CA7C760C4}\etranslator_out.exe File name: etranslator_out.exe
Size: 1.46 MB (1463485 bytes)
MD5: 68dd5ac058eade52afd1542e283df40f
Detection count: 80
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\AppData\Local\Temp\{F8D9CEC1-52B0-4526-B3D9-AC9CA7C760C4}\etranslator_out.exe
Group: Malware file
Last Updated: February 25, 2022
%LOCALAPPDATA%\Translate Mgr Helper\TMHelper.exe File name: TMHelper.exe
Size: 546.13 KB (546136 bytes)
MD5: ce752ba8e5165b3eadf5d00de96387bc
Detection count: 70
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%\Translate Mgr Helper
Group: Malware file
Last Updated: June 15, 2016
C:\Users\<username>\AppData\Roaming\iSmileg\iSmileg_update.exe File name: iSmileg_update.exe
Size: 2.89 MB (2891776 bytes)
MD5: 5ec25fb15ad9118a8435b4faab22740f
Detection count: 66
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\AppData\Roaming\iSmileg\iSmileg_update.exe
Group: Malware file
Last Updated: December 11, 2021
%LOCALAPPDATA%\FilterStart\FilterStart.exe File name: FilterStart.exe
Size: 189.95 KB (189952 bytes)
MD5: 7f1c4174748aad369a13f598e37c842c
Detection count: 44
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%\FilterStart
Group: Malware file
Last Updated: April 4, 2020
%LOCALAPPDATA%\ctfmom.exe File name: ctfmom.exe
Size: 238.08 KB (238080 bytes)
MD5: a8fe16b26bf8d84f79fd2cf350c034e4
Detection count: 19
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%
Group: Malware file
Last Updated: December 31, 2016
%LOCALAPPDATA%\translatemgr_1802\translatemgr_1802.exe File name: translatemgr_1802.exe
Size: 168.44 KB (168448 bytes)
MD5: fc9c0c0ccd222480f1ad265ddf3ed2a0
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%\translatemgr_1802
Group: Malware file
Last Updated: March 11, 2017
%LOCALAPPDATA%\translatemgr_1804\translatemgr_1804.exe File name: translatemgr_1804.exe
Size: 168.44 KB (168448 bytes)
MD5: 8c9bcc677eadeb39ec9db3f6522a6c4f
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%\translatemgr_1804
Group: Malware file
Last Updated: March 11, 2017

More files

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}Software\eTranslatorSoftware\Microsoft\Windows\CurrentVersion\Run\eTranslator Automatic UpdateSoftware\Microsoft\Windows\CurrentVersion\Run\eTranslator UpdateHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}e2ruetranslator

Additional Information

The following directories were created:
%APPDATA%\iSmileg%LOCALAPPDATA%\FilterStart%LOCALAPPDATA%\Translate Mgr Helper%LOCALAPPDATA%\translatemgr%PROGRAMFILES%\ScreenUp%PROGRAMFILES%\Translate Mgr%PROGRAMFILES%\e2ru%PROGRAMFILES(x86)%\ScreenUp%PROGRAMFILES(x86)%\Translate Mgr%PROGRAMFILES(x86)%\e2ru%UserProfile%\Local Settings\Application Data\FilterStart%UserProfile%\Local Settings\Application Data\Translate Mgr Helper%UserProfile%\Local Settings\Application Data\translatemgr
Loading...