EliteKeylogger manual removal:
Kill processes:
ek_setup.exe, windump.exe
Delete registry values:HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\tdiip
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\usbkbd
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tdiip
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\usbkbd
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RFC1156Agent
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A252B94-2FCD-BBF8-8ADD-AA019F83938E}
HKEY_LOCAL_MACHINE\SOFTWARE\Licenses\{083E450369831F6EF}
HKEY_LOCAL_MACHINE\SOFTWARE\Licenses\{I83E450369831F6EF}
HKEY_LOCAL_MACHINE\SOFTWARE\Licenses\{K7C0DB872A3F777C0}
HKEY_LOCAL_MACHINE\SOFTWARE\Licenses\{R7C0DB872A3F777C0}
Delete files:ek_setup.exe, windump.exe, mciole.dll, usbkbd.sys, tdiip.sys
Misc:Files tdiip.sys and usbkbd.sys are located in %System%\drivers folder.
Post Comment:
Attention: Use this form only if you have additional information about EliteKeylogger parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.