Severity scale  
  (47/100)

Fearless KeySpy. How to Remove? (Uninstall Guide)

removal by - -   | Type: Keyloggers
12
Variants: Fearless KeySpy 1.0, Fearless KeySpy 1.1b, Fearless KeySpy 2.0
From the publisher:
FKS is a keylogger, that will upload the logs to the root folder of a ftp server you specify, when the log reaches a certain size. It will start everytime with windows. It will log *all* keys, and the window caption (between >>> <<< chars, like '>>> Yahoo! Mail - Microsoft Internet Explorer <<<') they were typed in. Date and time when system starts/stops will also be logged. The logs will be uploaded with the name 'FKSlog_[time].log', like FKSlog_10-23-15.log (10 o'clock, 23 mins and 15 secs). When reading the log, '' means enter (return), '' is backspace, '' is escape, '' is the tab key, '' is the delete key. Compatible with 9*/Me/2K/XP.
Configuring the server:
It should be easy to set up if you ever used a trojan before; run FKS.exe.
First, the server options tab:
-> In the 'Server Name' field, enter a new for the server after installation, something unsuspicious would be better (use your imagination).
Note that if you specify a filanem that exists on the host computer(in the sys dir), it will be overwritten! -> The Registry Key field: same as above, enter something 'normal' ;)
The Logging Option tab:
-> The ftp address fileld: enter the hostanme of your ftp server, like 'ftp.myhost.com', or 'myhost.com'. You should know that... The server will connect to port 21 (default for ftp).
-> Ftp username: type in your username
-> ftp password: enter your ftp password
-> 'When log gets...' filed: the size of the logfile when it sould get uploaded; you have to think here a little, depending on what you're after: if you want a quick log, enter a small filesize (5-10000 bytes). If not, 500000 bytes (50KB) should be ok. Note that some ftp servers have a size limit, but that's your problem.
-> Logfile name fileld: enter a filename, any extension, or no extension, etc. Note that you shouldn't type system filenames, cause they will get overwritten...
That's it, hit 'Build Server', and you're done. The editor will make a 'server.exe' file, in the patch where you have the editor. DON'T compress/encrypt or otherwise tamper with the server file! Now all you have to do is make your victim run 'server.exe'...
Ghirai

v1.1 b
-> problem regarding editor fixed
-> server is now slightly smaller
Description:
FKS is a keylogger, that will upload the logs to the root folder of a ftp server you specify, when the log reaches a certain size. It will start everytime with windows. It will log *all* keys, and the window caption (between >>> <<< chars, like '>>> Yahoo! Mail - Microsoft Internet Explorer <<<') they were typed in. Date and time when system starts/stops will also be logged. The logs will be uploaded with the name 'FKSlog_[time].log', like FKSlog_10-23-15.log (10 o'clock, 23 mins and 15 secs). When reading the log, '' means enter (return), '' is backspace, '' is escape, '' is the tab key, '' is the delete key. Compatible with 9*/Me/2K/XP.

New in v1.1 b:
->problem regarding editor fixed
->server is now slightly smaller
Ghirai

v2.0
-> server is now 100% assembly, reaching 2.5 KB packed
-> buffer no longer gets lost when victim's box crashes/suddenly reboots/etc.
-> added a 'get and execute' feature (see readme)
-> fixed a bug in the editor, that existed in all previous versions
-> some GUI tweaks
-> 'remove file' now gets deleted after server remove
-> some features i didn't consider being neccessary were removed
Fearless KeySpy properties:
• Takes and sends out screenshots of user activity
• Sends out logs by FTP or email
• Logs keystrokes
• Hides from the user
• Stays resident in background

It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use. By downloading any of provided Anti-spyware software you agree with our Privacy Policy and Agreement of Use.
Do it now!
Download
Reimage - remover Happiness
Guarantee
Compatible with Microsoft Windows
What to do if failed?
If you failed to remove infection using Reimage Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Fearless KeySpy. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.
Reimage is recommended to uninstall Fearless KeySpy. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.
Not using OS X? Download a remover for Windows.
Press Mentions on Reimage
Alternate Software
Alternate Software
Plumbytes
We are testing Plumbytes's efficiency (2015-05-30 04:55)
Malwarebytes Anti Malware
We are testing Malwarebytes Anti Malware's efficiency (2015-05-30 04:55)
Hitman Pro
Webroot SecureAnywhere AntiVirus

Fearless KeySpy manual removal

Kill processes:
fks 2.0.exe, fks.exe, server.exe, fks2.0_server.exe, ouleaut32.exe
Delete registry values:
HKEY_CURRENT_USER\.default\software\microsoft\windows\currentversion\run\path
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run\ouleaut32
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\ouleaut32
HKEY_LOCAL_MACHINE \ software \ microsoft \ windows \ currentversion \ runservices \ ouleaut32
Unregister DLLs:
thehook.dll

Delete files:
fks 2.0.exe, fks.exe, ftpservers.txt, server.exe, fks2.0_server.exe, ouleaut32.exe, thehook.dll, ndetected.txt

Information updated:

Comments on Fearless KeySpy

Post a comment

Attention: Use this form only if you have additional information about a parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Home page Name



«

(All fields are required)