XPCSpy manual removal:
Kill processes:
xpcspypro.exe, rx.exe, systemout.exe
Delete registry values:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\System Check=rundll32.exe sysdll32.dll,systemcheck
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SystemOutService\ImagePath=%System%\systemout.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppMon.TShellExecuteHook
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\IEMon.IESpy
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{17A54BFC-8214-4F5C-B1A7-A161BFA5FDCC}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BA41EE62-B36A-4344-850C-9221073CF6B9}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E3E1DC8E-0CE1-4D96-8D49-E5B2B7B51ADA}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{17A54BFC-8214-4F5C-B1A7-A161BFA5FDCC}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{E3E1DC8E-0CE1-4D96-8D49-E5B2B7B51ADA}
Delete files:xpcspypro.exe, rx.exe, systemout.exe, appmon.dll, appspy.dll, iemon.dll, iespy.dll, keymon.dll, keyspy.dll, sysdll32.dll, systemin.sys
Delete directories:C:\Program Files\XSoftware
Misc:Exact file location:
xpcspypro.exe, appspy.dll, iespy.dll, keyspy.dll - C:\Program Files\XSoftware\XPCSpyPro
xpcspypro.exe, appmon.dll, iemon.dll, keymon.dll - C:\Program Files\XSoftware\Working
rx.exe, systemout.exe, sysdll32.dll - C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32
systemin.sys - C:\Windows\System\Drivers, C:\Windows\System32\Drivers or C:\Winnt\System32\Drivers
Post Comment: