| Spyware.CompuSpy removal process |
|
| Author:admin CopyFrom:web Hits: UpdateTime:2008-11-21 9:40:08 |
Begin of the article Spyware.CompuSpy removal process
1.DownloadGoogle recommend safer browser Web browser, For more safe , Stay Secure on the Web and stay far away virus,Download URL http://www.oral8.net/firefox/firefox.htm
2. Temporarily Disable System Restore (Windows Me/XP).
3. Update the virus definitions. Reboot computer in SafeMode
4. Run a full system scan and clean/delete all Spyware.CompuSpy infected files and Delete/Modify any values added to the registry.
Navigate to the subkey and delete the valuesas following:
When the program is executed, it creates the following files:
- %UserProfile%\Start Menu\Programs\CompuSpy KeyLogger\CompuSpy KeyLogger.lnk
- %UserProfile%\Start Menu\Programs\CompuSpy KeyLogger\CompuSpy Readme.lnk
- %UserProfile%\Start Menu\Programs\CompuSpy KeyLogger\Uninstall CompuSpy KeyLogger.lnk
- %ProgramFiles%\CompuSpy\CompuSpy.exe
- %ProgramFiles%\CompuSpy\CompuSpy.ini
- %ProgramFiles%\CompuSpy\etCrypto.dll
- %ProgramFiles%\CompuSpy\license.txt
- %ProgramFiles%\CompuSpy\log\CompuSpy.log
- %ProgramFiles%\CompuSpy\log\CompuSpy_12PM.log
- %ProgramFiles%\CompuSpy\readme.txt
- %ProgramFiles%\CompuSpy\un_CompuSpySetup_19849.exe
- %ProgramFiles%\CompuSpy\un_CompuSpySetup_19849.txt
Next, it creates the following registry subkeys:
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\CompuSpy KeyLogger
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\cswin2008.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CompuSpy KeyLogger
- HKEY_LOCAL_MACHINE\SOFTWARE\Upsilon Dynamics
- HKEY_LOCAL_MACHINE\SOFTWARE\UpsilonDynamics
It then creates the following registry entries so that it executes whenever Windows starts:
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\"CompuSpy KeyLogger" = "C:\Program Files\CompuSpy\cswin2008.exe"
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"CompuSpy" = "C:\Program Files\CompuSpy\CompuSpy.exe"
The program may perform the following actions on the computer:
- Record keystrokes
- Gather user names, passwords, access codes, Web sites visited, instant messages, and emails
- Record mouse clicks
- Record active window names and titles
- Record dates and times
The program may also run in stealth mode in order to disguise its activities from the user.
5. Exit registry editor .
6.delete the IE temp files or you may download ATF temp files cleaner to run a full cleaning.and restart the computer.
8. Now you may remove Spyware.CompuSpy successfully.
|
| howtoremoveInputer:admin Editor:admin |
| End Of The Article how to remove Spyware.CompuSpy |
|
Back 个howtoremove:W32.Redlofs
Next 个howtoremove: No |
