spyware removal instructions

NetSpy KeyLogger removal

Spyware NetSpy KeyLogger Information
Name: NetSpy KeyLogger
Category: Keylogger
Date: 2002-07-18
Dangerous: Yes
NetSpy KeyLogger is one of Keylogger spywares.
Finding it on your computer means that your computer is infected with Keylogger and crucial data could be endangered or even lost.
NetSpy KeyLogger description by publisher:
Creator: "The original spyware application! NetSpy was around long before most spyware applications of today & still remains the easiest to use & uses less system resources than any other spyware application available on the market! Small, yet powerful! With NetSpy you can secretly see what web sites others are accessing from a PC! NetSpy can also be configured to prevent access to specific web sites & even prevent credit card purchases! NetSpy runs invisibly so the person browsing the internet has no idea that large brother is monitoring them! Parents, use NetSpy to shield your children from pornographic web sites & prevent them from purchasing items online. Employers, see what web sites your employees are visiting & how much time they´re spending browsing the web. NetSpy will also record every key that a person types...even passwords! You can even read their private email messages after they have been deleted!"
>> Delete NetSpy KeyLogger automatically - Download Spyware Doctor

NetSpy KeyLogger Removal Instructions
Kill the following processes
netspy keylogger.exe, nconfig.exe, nsutil.exe, nsys.exe
Unregister the following DLLs and reboot
kbhook.dll in Windows\system32\
Delete these registry entries
HKEY_CLASSES_ROOT\capturescreens.capturescreen
HKEY_CLASSES_ROOT\clsid\{5508498f-7911-11d4-92d5-00105a1a0059}
HKEY_CLASSES_ROOT\clsid\{55084990-7911-11d4-92d5-00105a1a0059}
HKEY_CLASSES_ROOT\clsid\{55084991-7911-11d4-92d5-00105a1a0059}
HKEY_CLASSES_ROOT\clsid\{55084995-7911-11d4-92d5-00105a1a0059}
HKEY_CLASSES_ROOT\interface\{55084990-7911-11d4-92d5-00105a1a0059}
HKEY_CLASSES_ROOT\interface\{55084995-7911-11d4-92d5-00105a1a0059}
HKEY_CLASSES_ROOT\typelib\{5508498f-7911-11d4-92d5-00105a1a0059}
HKEY_LOCAL_MACHINE\hardware\resourcemap\pnp manager\pnpmanager\device\005358.raw
HKEY_LOCAL_MACHINE\hardware\resourcemap\pnp manager\pnpmanager\device\005358.translated
HKEY_LOCAL_MACHINE\software\classes\capturescreens.capturescreen
HKEY_LOCAL_MACHINE\software\classes\clsid\{55084991-7911-11d4-92d5-00105a1a0059}
HKEY_LOCAL_MACHINE\software\classes\interface\{55084990-7911-11d4-92d5-00105a1a0059}
HKEY_LOCAL_MACHINE\software\classes\interface\{55084995-7911-11d4-92d5-00105a1a0059}
HKEY_LOCAL_MACHINE\software\classes\typelib\{5508498f-7911-11d4-92d5-00105a1a0059}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\app paths\nsys.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls\c:\winnt\system32\kbhook.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls\c:\winnt\system32\nconfig.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls\c:\winnt\system32\nsutil.exe
HKEY_LOCAL_MACHINE\software\netspy\autoerase
HKEY_LOCAL_MACHINE\software\netspy\autorun
HKEY_LOCAL_MACHINE\software\netspy\duplicates
HKEY_LOCAL_MACHINE\software\netspy\file
HKEY_LOCAL_MACHINE\software\netspy\interval
HKEY_LOCAL_MACHINE\software\netspy\keylog
HKEY_LOCAL_MACHINE\software\netspy\keymax
HKEY_LOCAL_MACHINE\software\netspy\maxscreens
HKEY_LOCAL_MACHINE\software\netspy\menu
HKEY_LOCAL_MACHINE\software\netspy\newfile
HKEY_LOCAL_MACHINE\software\netspy\newkfile
HKEY_LOCAL_MACHINE\software\netspy\path
HKEY_LOCAL_MACHINE\software\netspy\pwd
HKEY_LOCAL_MACHINE\software\netspy\scrinterval
HKEY_LOCAL_MACHINE\software\netspy\scrsave
HKEY_LOCAL_MACHINE\software\netspy\spkey
HKEY_LOCAL_MACHINE\software\netspy\splash
HKEY_LOCAL_MACHINE\software\netspy\urlmax
HKEY_LOCAL_MACHINE\software\netspy\username
HKEY_LOCAL_MACHINE\software\s7000\string1
Remove the following files
faq.fil, file.txt, file_keys.txt, netspy keylogger.exe, netspy keylogger.ocx, netspy keylogger.txt.
netspy configurator.lnk in Program Files\Common Files\
capturescreen.ocx, captur~1.ocx, kbhook.dll, nconfig.exe, nsutil.exe, nsys.exe in Windows\system32\
Remove the following directories
Program Files\Common Files\netspy configurator.lnk

Bookmark NetSpy KeyLogger page

 Previous Spyware: Remove NetSpy 3.0e Next Spyware: Remove NetSpy/NetMonitor