XPCSpy Spyware

Virus description: XPCSpy
Category:Spyware

XPCSpy Detection :

Files:
[%SYSTEM%]\rx.exe
[%SYSTEM%]\SysDll32.dll
[%SYSTEM%]\systemout.exe
[%SYSTEM%]\rx.exe
[%SYSTEM%]\SysDll32.dll
[%SYSTEM%]\systemout.exe

Folders:
[%PROGRAM_FILES%]\xsoftware
[%PROGRAMS%]\123 xpcspy
[%PROGRAM_FILES%]\xpcspy

Registry Keys:
HKEY_CLASSES_ROOT\appmon.tshellexecutehook
HKEY_CLASSES_ROOT\clsid\{17a54bfc-8214-4f5c-b1a7-a161bfa5fdcc}
HKEY_CLASSES_ROOT\clsid\{ba41ee62-b36a-4344-850c-9221073cf6b9}
HKEY_CLASSES_ROOT\clsid\{e3e1dc8e-0ce1-4d96-8d49-e5b2b7b51ada}
HKEY_CLASSES_ROOT\iemon.iespy
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{17a54bfc-8214-4f5c-b1a7-a161bfa5fdcc}
HKEY_CLASSES_ROOT\appspy.tshellexecutehook
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\systemoutservice

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellpath
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellpath
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall

Removing XPCSpy:

you can run trial version of ExterminateIt, or remove XPCSpy manually..


ExterminateIt effectively and automatically removes Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware) from you computer.

Download ExterminateIt! to instantly get rid of XPCSpy!


Also Be Aware of the Following Threats:
Removing Romelp Trojan
Venus.GoClick.com Tracking Cookie Removal instruction
WSHV Trojan Removal
Zlob.VideoAXObject Trojan Symptoms