WinSession Logger manual removal:
Kill processes:
bootldr.exe, delservicew.exe, exwin32m.exe, install.exe, svchost.exe, svchost[X].exe, svclsv.exe, wslogger.exe
Delete registry values:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\xbtl=%System%\bootldr.exe
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\subsystem64r
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{EBT9L2DB0-B607-11d2-9CBD-0000F87A369E}
HKEY_LOCAL_MACHINE\SOFTWARE\Mcap4_software
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinSession Logger_is1
Delete files:bootldr.exe, delservicew.exe, exwin32m.exe, install.exe, svchost.exe, svchost[X].exe, svclsv.exe, wslogger.exe, digiwin.dll, nxkernel32.dll, sp.ini
Delete directories:C:\Program Files\WSLogger
C:\Documents and Settings\[Current User]\Start Menu\Programs\WinSession Logger
C:\Windows\System\9500
C:\Windows\System32\9500
C:\Winnt\System32\9500
Misc:[X] is a space character.
Exact file location:
install.exe, wslogger.exe, sp.ini - C:\Program Files\WSLogger
svchost.exe - C:\Windows\System\9500, C:\Windows\System32\9500 or C:\Winnt\System32\9500
bootldr.exe, delservicew.exe, exwin32m.exe, svchost[X].exe, svclsv.exe, digiwin.dll, nxkernel32.dll - C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32
Post Comment:
Attention: Use this form only if you have additional information about WinSession Logger parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.