|
| How to remove Spyware.HBScreenSpy |
|
| Author:Spyware.HBScreenSpy Hits: UpdateTime:2008-8-12 8:56:04 |
|
|
|
|
|
|
For remove Spyware.HBScreenSpy virus,please clean/delete all Spyware.HBScreenSpy infected files and Delete/Modify any values Spyware.HBScreenSpy added to the registry as following:
When the risk is executed, it creates the following folders:
- C:\Documents and Settings\All Users\Start Menu\Programs\HB Screen Spy
- %ProgramFiles%\HB Screen Spy
It then creates the following files:
- %UserProfile%\Desktop\IE Server.lnk
- C:\Documents and Settings\All Users\Start Menu\Programs\HB Screen Spy\IE Server.lnk
- C:\Documents and Settings\All Users\Start Menu\Programs\HB Screen Spy\Uninstall HB Screen Spy.lnk
- %ProgramFiles%\HB Screen Spy\EmbedObject.js
- %ProgramFiles%\HB Screen Spy\IEClientX.cab
- %ProgramFiles%\HB Screen Spy\IEClientX_Setup.exe
- %ProgramFiles%\HB Screen Spy\IEServer.exe
- %ProgramFiles%\HB Screen Spy\IEServer.ini
- %ProgramFiles%\HB Screen Spy\IEService.exe
- %ProgramFiles%\HB Screen Spy\index.htm
- %ProgramFiles%\HB Screen Spy\irunin.dat
- %ProgramFiles%\HB Screen Spy\irunin.ini
- %ProgramFiles%\HB Screen Spy\irunin.lng
- %ProgramFiles%\HB Screen Spy\othread2.dll
- %ProgramFiles%\HB Screen Spy\setup.cfg
- %ProgramFiles%\HB Screen Spy\sshooks.dll
- %Windir%\iun6002.exe
- %Windir%\iun[RANDOM NAME].exe
- %Temp%\irsetup.exe
Next it creates the following registry entry to so that it runs with Windows starts:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"IEServer" = "C:\Program Files\HB Screen Spy\IEServer.exe"
It also creates the following registry subkeys:
- HKEY_CURRENT_USER\Software\digi
- HKEY_CLASSES_ROOT\CLSID\{825BF622-FF5D-411A-8B1F-824CA555819F}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HB Screen Spy3.3
- HKEY_LOCAL_MACHINE\SOFTWARE\digi
The risk then allows a remote user to view the current screen output by listening for HTTP connections on TCP port 8080.
For successful remove Spyware.HBScreenSpy virus,you may also need do as following:
1. Temporarily Disable System Restore .
2. Update the virus definitions. Reboot computer in SafeMode;
3. Delete the IE temp files,some Spyware.HBScreenSpy temp file exisit there.
4.If you failed to remove Spyware.HBScreenSpy,please go to our remove help forum:http://help.antiviruses123.com
|
| End Of The Article How to remove Spyware.HBScreenSpy remove process |
|
Spyware.HidetoolsSpy
Spyware.SilentMonitor
Spyware.LightLogger
Trojan.Spamuzle
Trojan.Spamuzle!inf
PyroAntiSpy
Spyware.UltimateKeylog
SpywareScanner2008
AntiSpyware removal i…
Spyware.TupInsight
Spyware.SpyBossPro
Spyware.ExpressKeylog
Spyware.Borzoi
Internet Speed Monitor…
Trojan.Spryct
SpyGuarder
DisableSpyware remova…
DisableSpyware
SpyGuarder removal in…
AntiSpyCheck v2.4 rem…
|
