Remove Dark Omen 1.3. Description and removal instructions

Title: Dark Omen 1.3
Type: Remote Administration Tools	Severity scale: (65 / 100)

A Remote Administration Tool, designed for spying on user by logging
his keystrokes. The log is stored in the infected machine and later
sent to the attacker. He can study this log in order to find some vital
information (passwords, bank account numbers, etc.) The virus was
written in Delphi programming language. The origination date is March
2002. The author is Dave Noshow.

From the publisher:

"Run the wizard from your start menu. Follow the on-screen prompts and
when asked to save the file save it to a place you can find. This file
is the keylogger. All you do is double click the file when it is on
your target machine. The exe will look as if it has done nothing. BUT
it should install the keylogger to c:\windows\ActiveXUpd. The program
will be automatically started. Using the settings you specified in the
wizard. If you want to use the client/server side of the program it has
to be configured once installed. read below how to access the config
screen."

FORUM:
Discuss Dark Omen 1.3 in
spyware removal forum

Dark Omen 1.3 properties:
• Allows remote user connection
• Logs keystrokes
• Hides from the user
• Stays resident in background

Automatic Dark Omen 1.3 removal:

remover for Dark Omen 1.3

Dark Omen 1.3 manual removal:

Kill processes:
dk_client.exe, dk_server.exe, launcher.exe, [system, root]\\directxupd\\win32.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\win32systray HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runservices\win32systray

HELP:
how to remove registry entries

Delete files:
dk_client.exe, dk_server.exe, launcher.exe, readme.doc, readme.txt, [system root]\\directxupd\\win32.exe

HELP:
how to remove harmful files

Delete directories:
[system root]\directxupd

Other programs to remove Dark Omen 1.3:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 17/03/05
Information updated: 17/03/05

Additional resources related to Dark Omen 1.3:

Attention: If you know or you have a website or page about Dark Omen 1.3 removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about Dark Omen 1.3 parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.