Spy Lantern manual removal:
Delete registry values:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\[random name]driver
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\[random name]drv
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\[random name]driver
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\[random name]srv
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs=[file name].dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Spy Lantern Keylogger
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Spy Lantern Keylogger
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Spy Lantern Keylogger
Delete directories:C:\Documents and Settings\[Current User]\Start Menu\Programs\Spy Lantern Keylogger
Misc:Spy Lantern stores its files in the default system directory, which depending on the OS version can be C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32.
Post Comment: