SpyBuddy manual removal:
Kill processes:
sb32mon.exe, exitstealth.exe
Delete registry values:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\cdloader
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\regupdate
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\scancheck32
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\scansys32
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\systemcheck
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\system32
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\trunk32
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\winsyscheck
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr=1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\IgnoreShiftOveride=0x1
HKEY_LOCAL_MACHINE\SOFTWARE\ExploreAnywhere Software\SpyBuddy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SpyBuddy [XVS]
Delete files:sb32mon.exe, exitstealth.exe, install-drivers.dll, sbsysdll.dll, sb32mon.dll, sysicept.dll, winsscap.dll, win32sb.dll
Delete directories:C:\Program Files\ExploreAnywhere\SpyBuddy
Misc:[XVS] is the version number or name.
Exact file location:
sb32mon.exe, exitstealth.exe, install-drivers.dll - C:\Program Files\ExploreAnywhere\SpyBuddy
sbsysdll.dll, sysicept.dll, winsscap.dll - C:\Windows or C:\Winnt
Post Comment: