SpyDawn manual removal:
Kill processes:
spydawn.exe
Delete registry values:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\SpyDawn
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\spydawn.exe
HKEY_CLASSES_ROOT\TypeLib\{661173EE-FA31-4769-97D4-B556B5D09BDA}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{661173EE-FA31-4769-97D4-B556B5D09BDA}
HKEY_LOCAL_MACHINE\SOFTWARE\SpyDawn
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SpyDawn
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKCR\CLSID\{C1DF2728-8510-0773-96D8-5D0C1F27821B}
HKCR\TypeLib\{C7281808-F7C3-4BED-940F-40B9FD5784B6}
HKCR\Interface\{CC61280D-617C-4007-9D21-3F6F7BBA81FE}
HKCR\Interface\{CC09AC3E-AA61-4CBD-A351-DF435C8FE5C2}
HKCR\Interface\{A048440C-9495-4757-8FB3-0383ADE9E89D}
HKCR\Interface\{94596FC9-CBF8-4F61-8A02-AACBB86B51BA}
HKCR\Interface\{929FC56A-EE5C-436C-BC73-68D583233485}
HKCR\Interface\{7DE844A5-DC96-4CD5-B4EE-1C7AE0B5E62A}
HKCR\Interface\{7A7CA289-6E1E-4A00-AA81-C5D252945645}
HKCR\Interface\{63948A86-9227-4DAB-8AA6-CCD2111264A0}
HKCR\Interface\{5FC90027-65C3-4E0C-91C7-E3D3296E3763}
HKCR\Interface\{4DB7B2C0-C3BE-4A1D-915B-9B04981CF4B4}
HKCR\Interface\{3F109E21-D00A-4222-9A42-4A7611122CF1}
HKCR\Interface\{3A9CCAF6-08B8-4163-8DD8-3D9200314533}
HKCR\Interface\{28DC003F-7396-4B9D-8D0C-E40D8F4E3F4A}
HKCR\Interface\{16992424-7AC2-47F6-8799-BF4E8EBBECC1}
HKCR\Interface\{101981F9-8BA3-4064-949B-3C5BEB867134}
HKCR\Interface\{080C3EC1-AB54-40F3-88BE-E6FACE068CF0}
HKLM\SOFTWARE\SpyDawn
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SpyDawn
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\SpyDawn.exe
Unregister DLLs:geplxss.dll, higehsg.dll, tvomnc.dll, xkrdk.dll
Delete files:spydawn.exe, geplxss.dll, higehsg.dll, tvomnc.dll, xkrdk.dll, sd.ini
Delete directories:C:\Program Files\SpyDawn
Misc:Exact file location:
spydawn.exe, sd.ini - C:\Program Files\SpyDawn
geplxss.dll, higehsg.dll, tvomnc.dll, xkrdk.dll - C:\WINDOWS\System32 or C:\WINNT\System32
Domain Name: SPYDAWN.COM (85.255.119.125)
Registrant:
ODS ltd
Robyn Turner (turnrobyn@gmail.com)
Level 11 Toowong Tower
9 Sherwood Road
Toowong
null,Qld 4006
AU
Tel. +61.38761200
AVOID THIS DOMAIN AND THIS IP! Better block them in your Hosts file.
SpyDawn Removal Guide