WinSession Logger manual removal:
Kill processes:
bootldr.exe, delservicew.exe, exwin32m.exe, install.exe, svchost.exe, svchost[X].exe, svclsv.exe, wslogger.exe
Delete registry values:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\xbtl=%System%\bootldr.exe
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\subsystem64r
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{EBT9L2DB0-B607-11d2-9CBD-0000F87A369E}
HKEY_LOCAL_MACHINE\SOFTWARE\Mcap4_software
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinSession Logger_is1
Delete files:bootldr.exe, delservicew.exe, exwin32m.exe, install.exe, svchost.exe, svchost[X].exe, svclsv.exe, wslogger.exe, digiwin.dll, nxkernel32.dll, sp.ini
Delete directories:C:\Program Files\WSLogger
C:\Documents and Settings\[Current User]\Start Menu\Programs\WinSession Logger
C:\Windows\System\9500
C:\Windows\System32\9500
C:\Winnt\System32\9500
Misc:[X] is a space character.
Exact file location:
install.exe, wslogger.exe, sp.ini - C:\Program Files\WSLogger
svchost.exe - C:\Windows\System\9500, C:\Windows\System32\9500 or C:\Winnt\System32\9500
bootldr.exe, delservicew.exe, exwin32m.exe, svchost[X].exe, svclsv.exe, digiwin.dll, nxkernel32.dll - C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32
Post Comment: