Remove SpyMan. Description and removal instructions

 
Title: SpyMan

Type: Keyloggers
Severity scale:SpyMan severity is 52  (52 / 100)
 
SpyMan is a keylogger that may log your keystrokes as you type. Although SpyMan is mainly used by parents and employers, it can also be used by hackers to violate user privacy. SpyMan takes screenshots of user activity. It sends gathered data to the its users by e-mail.



Related files: how to use SpyMan.lnk, MSI484eb.LOG, MSI484ec.LOG, MSI86d1a.LOG, MSI86d1b.LOG, bad.fss, default.lan, Filter.fss, gud.fss, how to use SpyMan.html, blk111_10.gif, blk111_11.gif, blk111_12.gif, blk111_3.gif, blk111_4.gif, blk111_5.gif, blk111_7.gif, blk111_8.gif, blk111_9.gif, in_01.jpg, in_02.jpg, in_03.jpg, in_04.jpg, in_05.jpg, in_06.jpg, reg.jpg, scr-comp.gif, scr-date.gif, scr-emailweb.gif, scr-main.gif, scr-messenger.gif, spacer.gif, spybox.jpg, thumbs.db, misc.fss, spanish.lan, screenshots.html, fss.fss, issf.fss, msado27.tlb, MSMAPI32.OCX, rssf.fss, spmErr.txt, ssf.fss, LogMan.txt

Automatic SpyMan removal:

remover for SpyMan

SpyMan manual removal:

Kill processes:
spm.exe, winspl.exe
Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\”Microsoft Service” = “C:\WINDOWS\system32\fss\winspl.exe”
HKEY_CURRENT_USER\AppEvents\Schemes\Apps\MSMSGS\MSMSGS_ContactOnline\.Default
HKEY_CURRENT_USER\AppEvents\Schemes\Apps\MSMSGS\MSMSGS_NewAlert\.Default
HKEY_CURRENT_USER\AppEvents\Schemes\Apps\MSMSGS\MSMSGS_NewMail\.Default
HKEY_CURRENT_USER\AppEvents\Schemes\Apps\MSMSGS\MSMSGS_NewMessage\.Default
HKEY_CLASSES_ROOT\CLSID\{30BA1EC1-0059-4F91-9489-8D4E1189C688}
HKEY_CLASSES_ROOT\CLSID\{32AA3950-881F-4712-8B35-83BF6825921F}
HKEY_CLASSES_ROOT\CLSID\{5D4A5007-57B4-11D7-82A2-A4E31FDA2541}
HKEY_CLASSES_ROOT\CLSID\{A71C9F09-FD16-4EFD-A939-A7157371B850}
HKEY_CLASSES_ROOT\HDSNLib.HDSN
HKEY_CLASSES_ROOT\Interface\{5DF827DD-575A-4E39-A674-7C5EE792EAE7}
HKEY_CLASSES_ROOT\Interface\{72911F41-3592-4FCE-98FB-4DFE319E2936}
HKEY_CLASSES_ROOT\Interface\{7BB6757C-0987-4873-B1EF-1908D79C57E8}
HKEY_CLASSES_ROOT\Interface\{A5F268FB-F09B-4B59-A0B0-B28952CECF99}
HKEY_CLASSES_ROOT\Interface\{A772B691-5338-4285-8E2B-B16E8076274F}
HKEY_CLASSES_ROOT\Interface\{AABC19AB-D4EB-4E63-B16D-9A46B935CA7D}
HKEY_CLASSES_ROOT\Interface\{D5D50503-7894-4282-8E9B-072C04AC15B8}
HKEY_CLASSES_ROOT\MSMAPI.MAPIMessages.1
HKEY_CLASSES_ROOT\MSMAPI.MAPIMessages
HKEY_CLASSES_ROOT\MSMAPI.MAPISession.1
HKEY_CLASSES_ROOT\MSMAPI.MAPISession
HKEY_CLASSES_ROOT\TypeLib\{5D4A5005-57B4-11D7-82A2-A4E31FDA2541}
HKEY_CLASSES_ROOT\TypeLib\{780134DB-223D-45F5-AB63-5406A0F66C2C}
HKEY_CLASSES_ROOT\Interface\{06F979F8-6769-4E37-8F1E-682C5974AD65}
HKEY_CLASSES_ROOT\Interface\{473A13B0-A44B-4025-B665-2E1FB3AA707E}
HKEY_CLASSES_ROOT\Interface\{4ED7A4FC-6D07-4A22-AD0F-E00BC5168058}
HKEY_CLASSES_ROOT\Interface\{586E813A-46C0-4180-BC90-2092AD205300}
HKEY_CLASSES_ROOT\Interface\{5D4A5006-57B4-11D7-82A2-A4E31FDA2541}
Unregister DLLs:
ExTransparent.dll, HDSNLib.dll, ijl11.dll

Delete files:
how to use SpyMan.lnk MSI484eb.LOG MSI484ec.LOG MSI86d1a.LOG MSI86d1b.LOG bad.fss default.lan Filter.fss gud.fss how to use SpyMan.html blk111_10.gif blk111_11.gif blk111_12.gif blk111_3.gif blk111_4.gif blk111_5.gif blk111_7.gif blk111_8.gif blk111_9.gif in_01.jpg in_02.jpg in_03.jpg in_04.jpg in_05.jpg in_06.jpg reg.jpg scr-comp.gif scr-date.gif scr-emailweb.gif scr-main.gif scr-messenger.gif spacer.gif spybox.jpg Thumbs.db misc.fss spanish.lan screenshots.html fss.fss issf.fss msado27.tlb MSMAPI32.OCX rssf.fss spmErr.txt ssf.fss LogMan.txt

Other programs to remove SpyMan:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 15/05/08
Information updated: 15/05/08

Additional resources related to SpyMan:

Attention: If you know or you have a website or page about SpyMan removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about SpyMan parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites: