Remove Probot. Description and removal instructions

 
Title: Probot

Type: Spyware
Severity scale:Probot severity is 80  (80 / 100)
 
Probot is a commercial computer surveillance program that tracks user activity, records all keystrokes and captures screenshots. Gathered data can be encrypted and sent to a configurable e-mail address. Probot is not an actual parasite. However, all its functions can be easily used for malicious purposes, so the program is classified as spyware. Probot comes with the uninstaller and must be manually installed. It runs on every Windows startup.


Probot properties:
• Takes and sends out screenshots of user activity
• Sends out logs by FTP or email
• Logs keystrokes
• Hides from the user
• Stays resident in background

Automatic Probot removal:

remover for Probot

Probot manual removal:

Kill processes:
pbagent.exe, pbcpl.exe, pbhubsrv.exe
Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\pbagent
HKEY_CLASSES_ROOT\pblib32.IEWatcher
HKEY_CLASSES_ROOT\pblib32.IEWatcher.1
HKEY_CLASSES_ROOT\AppID\pblib32.dll
HKEY_CLASSES_ROOT\AppID\{2C4B0F32-8A8B-484F-A39D-519A57851F2C}
HKEY_CLASSES_ROOT\CLSID\{312FA154-E1B7-4336-9833-EE6B38D58B56}
HKEY_CLASSES_ROOT\Interface\{F40CCB3F-A677-4ECA-8A94-29E801EDC71E}
HKEY_CLASSES_ROOT\TypeLib\{EFF86F66-AB6F-4DFE-9BF8-020EA0A15801}
HKEY_LOCAL_MACHINE\SOFTWARE\NetHunter Group\ProBot
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pbhubsrv
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pbhubsrv
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\legacy_pbhubsrv
Delete files:
pbagent.exe, pbcpl.exe, pbhubsrv.exe, pbcommon.dll, pb25lib.dll, pblib32.dll
Delete directories:
C:\Program Files\Probot
Misc:
Exact file location:
pbagent.exe,pbhubsrv.exe,pb25lib.dll - C:\Windows\System32 or C:\Winnt\System32
other files - C:\Program Files\Probot

Other programs to remove Probot:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 19/03/04
Information updated: 07/08/05

Additional resources related to Probot:

Attention: If you know or you have a website or page about Probot removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about Probot parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:


Comments from visitors:


1. by Coder. 2004-03-01 10:49:46
Captures keystrokes, logs application usage, websites visited, etc. Can send this out via encrypted email.


Latest spyware news:
Similar parasites: