EliteKeylogger manual removal:
Kill processes:
ek_setup.exe, windump.exe
Delete registry values:HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\tdiip
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\usbkbd
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tdiip
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\usbkbd
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RFC1156Agent
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A252B94-2FCD-BBF8-8ADD-AA019F83938E}
HKEY_LOCAL_MACHINE\SOFTWARE\Licenses\{083E450369831F6EF}
HKEY_LOCAL_MACHINE\SOFTWARE\Licenses\{I83E450369831F6EF}
HKEY_LOCAL_MACHINE\SOFTWARE\Licenses\{K7C0DB872A3F777C0}
HKEY_LOCAL_MACHINE\SOFTWARE\Licenses\{R7C0DB872A3F777C0}
Delete files:ek_setup.exe, windump.exe, mciole.dll, usbkbd.sys, tdiip.sys
Misc:Files tdiip.sys and usbkbd.sys are located in %System%\drivers folder.
Post Comment: