Tuesday, November 25, 2008

Spy.Software Spyware

Removing Spy.Software
Categories: Spyware
Spyware is computer software that is installed surreptitiously on a personal computer
to with the computer, without the user's informed consent.

Visible Symptoms:
Files in system folders:
[%PROGRAM_FILES%]\system32\svchost.exe
[%SYSTEM%]\KeybHookpro.dll
[%APPDATA%]\ssdata\lgstat.ini
[%PROGRAM_FILES_COMMON%]\microsoft shared\dao\system32\faq.url
[%PROGRAM_FILES_COMMON%]\microsoft shared\dao\system32\help.chm
[%PROGRAM_FILES_COMMON%]\microsoft shared\dao\system32\svchost.exe
[%PROGRAM_FILES_COMMON%]\microsoft shared\dao\system32\unins000.exe
[%PROGRAM_FILES_COMMON%]\microsoft shared\dao\system32\website.url
[%SYSTEM%]\keybhookpro.dll
[%PROGRAM_FILES%]\system32\svchost.exe
[%SYSTEM%]\KeybHookpro.dll
[%APPDATA%]\ssdata\lgstat.ini
[%PROGRAM_FILES_COMMON%]\microsoft shared\dao\system32\faq.url
[%PROGRAM_FILES_COMMON%]\microsoft shared\dao\system32\help.chm
[%PROGRAM_FILES_COMMON%]\microsoft shared\dao\system32\svchost.exe
[%PROGRAM_FILES_COMMON%]\microsoft shared\dao\system32\unins000.exe
[%PROGRAM_FILES_COMMON%]\microsoft shared\dao\system32\website.url
[%SYSTEM%]\keybhookpro.dll

How to detect Spy.Software:

Files:
[%PROGRAM_FILES%]\system32\svchost.exe
[%SYSTEM%]\KeybHookpro.dll
[%APPDATA%]\ssdata\lgstat.ini
[%PROGRAM_FILES_COMMON%]\microsoft shared\dao\system32\faq.url
[%PROGRAM_FILES_COMMON%]\microsoft shared\dao\system32\help.chm
[%PROGRAM_FILES_COMMON%]\microsoft shared\dao\system32\svchost.exe
[%PROGRAM_FILES_COMMON%]\microsoft shared\dao\system32\unins000.exe
[%PROGRAM_FILES_COMMON%]\microsoft shared\dao\system32\website.url
[%SYSTEM%]\keybhookpro.dll
[%PROGRAM_FILES%]\system32\svchost.exe
[%SYSTEM%]\KeybHookpro.dll
[%APPDATA%]\ssdata\lgstat.ini
[%PROGRAM_FILES_COMMON%]\microsoft shared\dao\system32\faq.url
[%PROGRAM_FILES_COMMON%]\microsoft shared\dao\system32\help.chm
[%PROGRAM_FILES_COMMON%]\microsoft shared\dao\system32\svchost.exe
[%PROGRAM_FILES_COMMON%]\microsoft shared\dao\system32\unins000.exe
[%PROGRAM_FILES_COMMON%]\microsoft shared\dao\system32\website.url
[%SYSTEM%]\keybhookpro.dll

Folders:
[%PROGRAMS%]\007 spy software
[%PROGRAM_FILES%]\ssmon

Registry Keys:
HKEY_LOCAL_MACHINE\software\spysoftware

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing Spy.Software:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
PassAlert Trojan Symptoms
Pohlup Trojan Symptoms

No comments: