> Spyware Encyclopedia Page 129 > Sysmon

Sysmon removal

Spyware Sysmon Information
Name: Sysmon Category: Backdoor Date: 2005-01-28 Author: Bomber_guy_uk Dangerous: Yes

Sysmon is Backdoor - spyware.
You should remove it from your system as soon as possible.

Sysmon description by Bomber_guy_uk:

Vendor: ´Once run, sysmon will copy itself to the windows directory & load at startup. I suggest using someting like silkrope (for BO2k which i´ve included) to bind it with smth innocent. When connected to the internet it´ll send a message to the irc server.´

This Backdoor is also known as:

•Backdoor.Sysmon.
• Backdoor.Sysmon - named by Kaspersky.
• Backdoor/Sysmon.A - named by Computer Associates.
• Backdoor/SysMon.B - named by Computer Associates.
• BackDoor-JQ - named by McAfee.
• Bck/Sysmon - named by Panda.
• security risk or a "backdoor" program - named by F-Prot.
• Win32.SyMon - named by Computer Associates.
• Win32/Sysmon trojan - named by Eset.

>> Delete Sysmon automatically - Download Spyware Doctor

Sysmon Removal Instructions
Kill the following processes noinfect.exe, sysmon.exe, sysmonnt.exe
Remove the following files noinfect.exe, readme.rtf, sysmon.exe, sysmonnt.exe.

Bookmark Sysmon page

Previous Spyware: Remove Sysm-249

Next Spyware: Remove Sysmon.pl