Remove Kbroy. Description and removal instructions

 
Title: Kbroy
Also known as: Maha
Type: Keyloggers
Severity scale:Kbroy severity is 67  (67 / 100)
 
Kbroy, also known as Maha, is a parasitic keylogger that records all user keystrokes in attempt to steal important passwords and login names. Gathered data might be transferred to the remote attacker. Kbroy also changes some Internet Explorer settings and disables the Windows Firewall. The keylogger automatically runs on every Windows startup.


Kbroy properties:
• Logs keystrokes
• Changes browser settings
• Hides from the user
• Stays resident in background

Automatic Kbroy removal:

remover for Kbroy

Kbroy manual removal:

Kill processes:
winupgrm.exe
Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\winctrl
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\winctrl
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\EnableFirewall=0
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\DisableNotifications\=1
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasMan\Parameters\DisableSavePassword=1
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FormSuggest Passwords=no
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FormSuggest PW Ask=no
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Use FormSuggest=no
Delete files:
winupgrm.exe, sqlserver.dll
Misc:
All Kbroy files reside in main Windows folder C:\Windows or C:\Winnt.

Other programs to remove Kbroy:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 15/12/05
Information updated: 15/12/05

Additional resources related to Kbroy:

Attention: If you know or you have a website or page about Kbroy removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about Kbroy parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites: