NETObserve manual removal:
Kill processes:
broadcast.exe, no32mon.exe
Delete registry values:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\1sys32cfg
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls\%Windir%\unvise32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\ExploreAnywhere Software\NO\buy_url=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\ExploreAnywhere Software\NO\site_url=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NETObserve [XVS]
Delete files:broadcast.exe, no32mon.exe, easys.dll, nosys32.dll, syscap32.dll
Delete directories:C:\Program Files\ExploreAnywhere\NETObserve
C:\Documents and Settings\All Users\Start Menu\Programs\NETObserve [XVS]
Misc:[XVS] is the version number or name.
[site address] is an address of a web site on the exploreanywhere.com domain.
Pressing CTRL+ALT+SHIFT+F12 brings main NETObserve window. The key combination may vary.
Exact file location:
broadcast.exe, no32mon.exe - C:\Program Files\ExploreAnywhere\NETObserve
easys.dll, nosys32.dll, syscap32.dll - C:\Windows or C:\Winnt
Post Comment:
Attention: Use this form only if you have additional information about NETObserve parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.