XP Advanced Keylogger manual removal:
Kill processes:
toolkeylogger.exe
Delete registry values:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\XP Advanced Keylogger
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\LicenseManager.RegCode
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\LicenseManager.RegCode.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ToolKeyloggerDLL.Application
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ToolKeyloggerDLL.Application.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ToolKeyloggerDLL.BlockExe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ToolKeyloggerDLL.BlockExe.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ToolKeyloggerDLL.Clipboard
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ToolKeyloggerDLL.Clipboard.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ToolKeyloggerDLL.Hotkey
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ToolKeyloggerDLL.Hotkey.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ToolKeyloggerDLL.Keyboard
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ToolKeyloggerDLL.Keyboard.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ToolKeyloggerDLL.LogToFTP
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ToolKeyloggerDLL.LogToFTP.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ToolKeyloggerDLL.LogToMail
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ToolKeyloggerDLL.LogToMail.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ToolKeyloggerDLL.Password
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ToolKeyloggerDLL.Password.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ToolKeyloggerDLL.Screen
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ToolKeyloggerDLL.Screen.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ToolKeyloggerDLL.TaskList
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ToolKeyloggerDLL.TaskList.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{17B307BE-B2EC-43E8-8605-5E1F257273B1}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5388D0EE-ACE4-4C4D-8532-72F234399AEB}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{60FB8D96-D4E9-461B-81A1-2356040B73E5}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A9676C29-ED6E-4C33-9295-8BC13CD3947D}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B44432C2-4D5C-4495-AC72-55A39917142C}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B7385BC9-4857-471B-9E06-CF2807288633}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BA7A51FA-04F1-45CB-B493-36AD46950432}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C080FFDA-6D65-4F98-BA30-89A340FC2C2C}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C610B319-5EF8-4302-AC99-4580932A5957}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E27D817E-A07E-481D-B449-48F83D7A18F4}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{4C4AB6B2-4BC3-494A-9232-5001E0793AC4}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\XP Advanced Keylogger_is1
Unregister DLLs:jmail.dll, licensemanager.dll, toolkeylogger.dll
Delete files:toolkeylogger.exe, gdiplus.dll, jmail.dll, licensemanager.dll, toolkeylogger.dll
Delete directories:C:\XPToolsLicenseComponent
C:\Program Files\XP Advanced Keylogger
C:\Documents and Settings\[Current User]\Start Menu\Programs\XP Advanced Keylogger
Misc:Exact file location:
gdiplus.dll - C:
licensemanager.dll - C:\XPToolsLicenseComponent
toolkeylogger.exe - C:\Program Files\XP Advanced Keylogger
jmail.dll, toolkeylogger.dll - C:\Program Files\XP Advanced Keylogger\DLLs