|
| How to remove Spyware.UltimateKeylog |
|
| Author:Spyware.UltimateKeylog Hits: UpdateTime:2008-8-1 12:14:48 |
|
|
|
|
|
|
For remove Spyware.UltimateKeylog virus,please run antivirus Run a full system scan and clean/delete all Spyware.UltimateKeylog infected files and Delete/Modify any values added to the registry. Navigate to the subkey and delete the values as following Spyware.UltimateKeylog details:
This spyware program can be downloaded from www.ultimatekeylogger.com.
When the program is executed, it creates the following files:
- %UserProfile%\Local Settings\Temp\[RANDOM NAME].tmp
- C:\Documents and Settings\All Users\Application Data\ukl\encryptedlogs\Administrator\DecryptedReport\DecryptedReport.html
- C:\Documents and Settings\All Users\Application Data\ukl\encryptedlogs\Administrator\DecryptedReport\Screenshots\Screenshot_[USER NAME]_at_[COMPUTER NAME]_[DATE].jpg
- C:\Documents and Settings\All Users\Application Data\ukl\encryptedlogs\Administrator\encryptedscrns\Screenshot_[USER NAME]_at_[COMPUTER NAME]_[DATE]
- C:\Documents and Settings\All Users\Application Data\ukl\encryptedlogs\Administrator\encryptedscrns\Screenshot_[USER NAME]_at_[COMPUTER NAME]_[DATE]
- C:\Documents and Settings\All Users\Application Data\ukl\encryptedlogs\Administrator\log.ukl
- C:\Documents and Settings\All Users\Application Data\ukl\ukl.cfg
- C:\Documents and Settings\All Users\Application Data\uklpr\appface.dll
- C:\Documents and Settings\All Users\Application Data\uklpr\KLKlMon.dll
- C:\Documents and Settings\All Users\Application Data\uklpr\KLPP.dll
- C:\Documents and Settings\All Users\Application Data\uklpr\KRyLack_Software_Website.url
- C:\Documents and Settings\All Users\Application Data\uklpr\LICENSE.txt
- C:\Documents and Settings\All Users\Application Data\uklpr\ui.urf
- C:\Documents and Settings\All Users\Application Data\uklpr\Ultimate_Keylogger_Website.url
- C:\Documents and Settings\All Users\Application Data\uklpr\unukl.exe
- C:\Documents and Settings\All Users\Application Data\uklpr\wmpusrvc.chm
- C:\Documents and Settings\All Users\Application Data\uklpr\wmpusrvc.exe
- C:\Documents and Settings\All Users\Desktop\Ultimate Keylogger.lnk
- C:\Documents and Settings\All Users\Start Menu\Programs\Ultimate Keylogger\Ultimate Keylogger.lnk
Next, the program modifies the following registry entry so that it executes whenever Windows starts: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\"ukl" = "C:\documents and Settings\All Users\Application Data\uklpr\wmpusrvc.exe"
It then creates the following registry subkeys:
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{E4F2CA1F-7ED0-25CB-5EEF-F26D9921AC33}
- HKEY_CURRENT_USER\Software\ukl
- HKEY_CLASSES_ROOT\CLSID\{E4F2CA1F-7ED0-25CB-5EEF-F26D9921AC33}
This spyware program can perform the following functions:
- Record keystrokes
- Take screen-shots after a prescribed amount of time
- Monitor Web activity
- Send logs and reports to a destination specified by the user
For successful remove Spyware.UltimateKeylog virus,you may also need do as following:
1.Please Download Google recommend safer browser Web browser, For more safe , Stay Secure on the Web and stay far away virus,Download URL http://www.antiviruses123.com/firefox/firefox.htm;
2. Temporarily Disable System Restore .
3. Update the virus definitions. Reboot computer in SafeMode;
4.Please download ATF Cleaner: IF you can not remove Spyware.UltimateKeylog virus successfully,you may seek help on Free Virus Remove Help forum URL:http://help.antiviruses123.com.Our anti virus experts will help you handle Spyware.UltimateKeylog virus:
|
| End Of The Article How to remove Spyware.UltimateKeylog remove process |
|
SpywareScanner2008 AntiSpyware removal i… Spyware.TupInsight Spyware.SpyBossPro Spyware.ExpressKeylog Spyware.Borzoi Internet Speed Monitor… Trojan.Spryct SpyGuarder DisableSpyware remova… DisableSpyware SpyGuarder removal in… AntiSpyCheck v2.4 rem… WinSpywareProtect 5.1 … Spyware.SpyMan CpuSpike WinAntiVirus Pro AntiSpywareMaster Spyware.SpyMail PrivacyWatcher
|