EarSpy manual removal:
Kill processes:
esclient.exe, esviewer.exe, is-ra1l5.exe
Delete registry values:HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Logolp
HKEY_CURRENT_USER\SOFTWARE\VBA Program Settings\EarSpyViewer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\EarSpy_is1
Delete files:esclient.exe, esviewer.exe, is-ra1l5.exe, old[X].tmp
Delete directories:C:\Program Files\EarSpy
C:\Documents and Settings\[Current User]\Start Menu\Programs\EarSpy
Misc:[X] is a random digit.
Exact file location:
esviewer.exe - C:\Program Files\EarSpy
esclient.exe, is-ra1l5.exe - C:\Windows or C:\Winnt
old[X].tmp - C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32
Post Comment: