EBlaster 5.0 Description:

EBlaster 5.0 is a keylogger. It could be used for malicious purposes.

Anti-keyloggerT is a reliable tool to remove keyloggers, both known and unknown.

Remove the Trojan Using Spyware Doctor! More info about Spyware Doctor.

Sponsored Links:

EBlaster 5.0 Removal:

To remove EBlaster 5.0, please follow the instruction:

1. Terminate the processes in Tasks Manager:
   biosboot.exe
   chkdisk.exe
   logmon.exe
   netbcam.exe
   netutil.exe
   profwin.exe
   svrwin.exe
   v32wsock.exe
   usbw32.exe
   w32sub.exe
    
2. Click Start > Run. Type REGSVR32 -u <Dll_name>. Then click OK. Replace <Dll_name> with followings:
   ceract.dll
   chkcer.dll
   hosthex32.dll
   netras.dll
   perfboot.dll
   rtfmidi.dll
   statslink.dll
   autprof.dll
   biosuni.dll
   catmidi.dll
   cfgtcp.dll
   cfgvga.dll
   compserver.dll
   conflib32.dll
   ctldde.dll
   ctldll.dll
   ddectl.dll
   devcrypt.dll
   dhcpkbd.dll
   dllcmd.dll
   httpsserver32.dll
   ipdll32.dll
   kbdman.dll
   macnetb32.dll
   midical.dll
   modipx.dll
   modstats.dll
   msdde.dll
   netbaut.dll
   netipx.dll
   odbckey.dll
   olehost.dll
   regdb.dll
   rtfftp.dll
   sqlhost32.dll
   statip.dll
   tcpterm.dll
   uniserver.dll
   vgalog.dll
   xmlbot32.dll
   xpcmd.dll
    
3. Click Start > Run. Type REGEDIT. Then click OK. Navigate to and delete the registry subkeys:
   HKEY_LOCAL_MACHINE\software\classes\clsid\{0e289927-69b7-4c4c-8502-354e048c8e92}
   HKEY_LOCAL_MACHINE\software\classes\clsid\{191922d9-d5ae-453d-b290-f26a9c270402}
   HKEY_LOCAL_MACHINE\software\classes\clsid\{27474baa-705f-4769-a44f-e13a8be4e610}
   HKEY_LOCAL_MACHINE\software\classes\clsid\{2be166ed-f16c-46de-b623-3575fd9b5d6d}\wivdevenum
   HKEY_LOCAL_MACHINE\software\classes\clsid\{2efe6983-b0bf-4ebf-9637-a7c10ec3eebb}
   HKEY_LOCAL_MACHINE\software\classes\clsid\{30b92215-0e32-400e-a05d-e583bf1d6c49}
   HKEY_LOCAL_MACHINE\software\classes\clsid\{5343160f-29a0-49e3-8782-c08b11e0675f}
   HKEY_LOCAL_MACHINE\software\classes\clsid\{75c3efc9-45ba-48f4-96a9-f4708a4b32db}
   HKEY_LOCAL_MACHINE\software\classes\clsid\{812e1c52-8b82-4bc7-bdfa-cfdaedb63f41}
   HKEY_LOCAL_MACHINE\software\classes\clsid\{81cdda69-0eec-4142-8eb4-de2a433c91a2}
   HKEY_LOCAL_MACHINE\software\classes\clsid\{855edf42-f91b-4818-8df1-b58ca6043290}
   HKEY_LOCAL_MACHINE\software\classes\clsid\{99c193ba-d72b-4934-8612-6bc25640cb1f}
   HKEY_LOCAL_MACHINE\software\classes\clsid\{b7013911-76cf-4750-b174-2b573bc2f14c}
   HKEY_LOCAL_MACHINE\software\classes\clsid\{ce0babb4-3a61-4dbb-a6c7-f69896a47540}
   HKEY_LOCAL_MACHINE\software\classes\clsid\{e4b58522-89aa-45ed-bf8d-ebe7207a5d2a}
   HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload
   \caleng
   HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload
   \lanras
   HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload
   \netbcab
   Registry management is too hard? Download Registry Mechanic , and you will find it too easy!
    
4. Remove the files above mentioned
    
5. Remove the directories and their containing files in Explorer if exist:
   %System Dir%\ddecom
   %System Dir%\ipxip
   %System Dir%\modnetb
   %System Dir%\niccam
   %System Dir%\submon
   %System Dir%\termme

Spyware Doctor can automatically remove the adware. Even if you remove it manually, we recommend you should use Spyware Doctor to make sure it's completely removed from your system and will not be reinstalled by itself.

Download the last version of Spyware Doctor to protect your system.

More Removal Instructions for Emerging Adware & Spyware