Title: Cheat Monitor

Type: Keyloggers

Remove Cheat Monitor. Removal instructions

Also known as: CheatMonitor

Severity scale:

(90 / 100)

Cheat Monitor keylogger is a very dangerous infection. Although it doesn’t do harm on its own, CheatMonitor collects information about you and sends it to attacker who can do much damage. Cheat Monitor tracks literally everything user does on a computer. It is able to access emails and make a list of visited websites. It monitors IM conversations and each application running on the compromised computer. CheatMonitor also keeps the best traditions of keyloggers and records every keystroke when user types. The gathered information is regularly delivered to a remote attacker. Cheat Monitor may steal user’s online banking accounts, email accounts and sensitive information.

CheatMonitor is designed to spy on family members. But using this malware against family is not as harmful as stealing someone’s money or various web accounts. CheatMonitor causes serious harm and ethical issues in both ways. Cheat Monitor may be installed by jealous fiancé, but it more usually spreads with help of trojans. It is difficult to notice this keylogger running on your computer as it works secretly. If security tools detect Cheat Monitor on your computer, remove it as soon as possible.

Related files: %UserProfile%\Local Settings\Temp\cmx1\cheatmonitorR_SCREEN.DATETIME.[RANDOM DATE AND TIME].png, %UserProfile%\Local Settings\Application Data\Protexis\UserSettings.xml, %UserProfile%\Local Settings\Temp\CFGD.tmp, %UserProfile%\Local Settings\Temp\cmx1\cheatmonitorR_KEY.klog.html, %UserProfile%\Local Settings\Temp\VSDB.tmp\DotNetFX\dotnetchk.exe, %UserProfile%\Local Settings\Temp\VSDB.tmp\install.log, %UserProfile%\Start Menu\Programs\cheatmonitor.lnk, C:\Documents and Settings\All Users\Application Data\Protexis\DL\[RANDOM NAME].dlf, C:\Documents and Settings\All Users\Application Data\Protexis\State\[RANDOM NAME].dls, %CommonProgramFiles%\cmx1\cheatmonitor.ico, %CommonProgramFiles%\cmx1\cmx1.dat, %CommonProgramFiles%\cmx1\setup_dot_net_checker.msi, %Windir%\Installer\[RANDOM NAME].msi

Cheat Monitor properties:
• Sends out logs by FTP or email
• Logs keystrokes
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic Cheat Monitor removal:

remover for Cheat Monitor

SpyHunter is recommended remover to uninstall Cheat Monitor. You should confirm using free trial that it detects current version of parasite.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manul removal instructions below.

If you failed to remove Cheat Monitor using SpyHunter please report this to us.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.

STOPzilla

download | review

We are testing STOPzilla's efficiency at removing Cheat Monitor (2010-04-21 23:41:47)

Malwarebytes Anti Malware

download | review

We are testing Malwarebytes Anti Malware's efficiency at removing Cheat Monitor (2010-04-21 23:41:47)

Spyware Doctor

download | review | tutorial

We are testing Spyware Doctor's efficiency at removing Cheat Monitor (2010-04-21 23:41:47)

XoftSpySE Anti Spyware

download | review

Cheat Monitor manual removal:

FORUM:
Discuss Cheat Monitor in
spyware removal forum

Kill processes:
dotnetchk.exe

HELP:
how to kill malicious processes

Delete registry values:
KEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\?�?cheatmonitor?�? = ?�?C:\progra~1\common~1\cmx1\start.exe?�?
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CBDCB339-21C1-4834-9572-51ECC329ABD7}
HKEY_LOCAL_MACHINE\SOFTWARE\cheatmonitor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\2FABB6478E3EAB84C98C6D8AB6155523
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\[RANDOM SID]\Components\858132C493B23D11E8D0000CF486730D
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\[RANDOM SID]\Products\933BCDBC1C124384592715CE3C92BA7D
HKEY_USERS\[RANDOM SID]\Software\Microsoft\Installer\Features\933BCDBC1C124384592715CE3C92BA7D
HKEY_USERS\[RANDOM SID]\Software\Microsoft\Installer\Products\933BCDBC1C124384592715CE3C92BA7D
HKEY_USERS\[RANDOM SID]\Software\Microsoft\Installer\UpgradeCodes\2FABB6478E3EAB84C98C6D8AB6155523

HELP:
how to remove registry entries

Delete files:
%UserProfile%\\Local Settings\\Temp\\cmx1\\cheatmonitorR_SCREEN.DATETIME.[RANDOM DATE AND TIME].png %UserProfile%\\Local Settings\\Application Data\\Protexis\\UserSettings.xml %UserProfile%\\Local Settings\\Temp\\CFGD.tmp %UserProfile%\\Local Settings\\Temp\\cmx1\\cheatmonitorR_KEY.klog.html %UserProfile%\\Local Settings\\Temp\\VSDB.tmp\\DotNetFX\\dotnetchk.exe %UserProfile%\\Local Settings\\Temp\\VSDB.tmp\\install.log %UserProfile%\\Start Menu\\Programs\\cheatmonitor.lnk C:\\Documents and Settings\\All Users\\Application Data\\Protexis\\DL\\[RANDOM NAME].dlf C:\\Documents and Settings\\All Users\\Application Data\\Protexis\\State\\[RANDOM NAME].dls %CommonProgramFiles%\\cmx1\\cheatmonitor.ico %CommonProgramFiles%\\cmx1\\cmx1.dat %CommonProgramFiles%\\cmx1\\setup_dot_net_checker.msi %Windir%\\Installer\\[RANDOM NAME].msi

HELP:
how to remove harmful files

Information added: 2008-09-30 07:06:00
Information updated: 2010-04-21 21:04:32

Additional resources related to Cheat Monitor:

Attention: If you know or you have a website or page about Cheat Monitor removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about Cheat Monitor parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Latest spyware news:

Subscribe to news

Similar parasites:

Compare spyware removers
Compare free products

HijackThis Log Analyzer Beta 2

Spreading the knowledge:

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.