Tuesday, November 18, 2008

Keyboard.Guardian Spyware

Keyboard.Guardian malware description and removal detail
Categories:Spyware
Visible Symptoms:
Files in system folders:
[%PROFILE%]\recent\kg.lnk
[%STARTUP%]\keyboard guardian.lnk
[%PROFILE%]\recent\kg.lnk
[%STARTUP%]\keyboard guardian.lnk

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting Keyboard.Guardian:

Files:
[%PROFILE%]\recent\kg.lnk
[%STARTUP%]\keyboard guardian.lnk
[%PROFILE%]\recent\kg.lnk
[%STARTUP%]\keyboard guardian.lnk

Folders:
[%PROGRAMS%]\diplodock\keyboard guardian
[%PROGRAMS%]\diplodock\keyboard guardian trial
[%PROGRAM_FILES%]\diplodock\keyboard guardian
[%PROGRAM_FILES%]\diplodock\keyboard guardian trial

Registry Keys:
HKEY_CLASSES_ROOT\installer\products\260f33e421ace6b49bc308800d6d3f98
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\menuorder\start menu\programs\diplodock\keyboard guardian trial
HKEY_CURRENT_USER\software\vb and vba program settings\ajksfrqwsw
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\{4e33f062-ca12-4b6e-b93c-8008d0d6f389}

Registry Values:
HKEY_CLASSES_ROOT\installer\features\260f33e421ace6b49bc308800d6d3f98
HKEY_CLASSES_ROOT\installer\upgradecodes\bd5316e5d50750546b6884d128eb13bd
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\installer\folders
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\installer\folders
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\installer\folders
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\installer\upgradecodes\bd5316e5d50750546b6884d128eb13bd
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\active key logger_is1
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\active key logger_is1
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\active key logger_is1
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\active key logger_is1
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\active key logger_is1
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\active key logger_is1
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\active key logger_is1
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\active key logger_is1
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\active key logger_is1
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\active key logger_is1
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\active key logger_is1
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\active key logger_is1

Removing Keyboard.Guardian:

An up-to-date copy of ExterminateIt should detect and prevent infection from Keyboard.Guardian.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Keyboard.Guardian manually.

To completely manually remove Keyboard.Guardian malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Keyboard.Guardian.

  1. Use Task Manager to terminate the Keyboard.Guardian process.
  2. Delete the original Keyboard.Guardian file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Keyboard.Guardian from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Keyboard.Guardian!


Also Be Aware of the Following Threats:
Remove SillyDl.CRU Trojan
Preacher Trojan Cleaner

No comments: