FireSpy manual removal:
Kill processes:
138762763.exe
Delete registry values:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\stup
HKEY_CURRENT_USER\Keys\k1
HKEY_CURRENT_USER\Keys\k2
Delete files:138762763.exe, appinterconn.dll, appinterconn.xpt
Delete directories:C:\Documents and Settings\[Current User]\Application Data\Mozilla\Firefox\Profiles\[X].defaults\extensions\(1d58a41c-b1a5-4c8f-94bf-6350f2809b06)
Misc:[X] is a combination of random characters.
Exact file location:
138762763.exe - C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32
appinterconn.dll, appinterconn.xpt - C:\Program Files\Mozilla Firefox\Components
Post Comment: