How can i get rid of this keylogger?

  • Thread starter Thread starter ratimus
  • Start date Start date
R

ratimus

I had an error message pop up on my pc, I did not know what it was so I
googled it.
Turns out it is an error message for a keylogger program called Elite
Keylogger from Widestep Software. The keylogger shuts down after system
startup which is why I get the error message, but it has slowed startup time
to a crawl. Emailed Widestep for an uninistaller but got no response. Norton
antivirus, windows defender, and spybot search and destroy all scan clean.
Any suggestions?
 
Since you already know the name well its going be easier to look for it also

Use Hijackthis to view your startup list ( 04/ or worst 023 area ).

get it here.....
http://www.trendsecure.com

"ratimus" wrote in message
news:EB0B1D48-C6D4-4CA8-AF1C-6FB8EA9B9799@microsoft.com...
> I had an error message pop up on my pc, I did not know what it was so I
> googled it.
> Turns out it is an error message for a keylogger program called Elite
> Keylogger from Widestep Software. The keylogger shuts down after system
> startup which is why I get the error message, but it has slowed startup
> time
> to a crawl. Emailed Widestep for an uninistaller but got no response.
> Norton
> antivirus, windows defender, and spybot search and destroy all scan clean.
> Any suggestions?
 
Hi,

I assume you went to this link?
http://www.widestep.com/files/uninstall.html



--
All the best,
SG

Is your computer system ready for Vista?
https://winqual.microsoft.com/hcl/

"ratimus" wrote in message
news:EB0B1D48-C6D4-4CA8-AF1C-6FB8EA9B9799@microsoft.com...
>I had an error message pop up on my pc, I did not know what it was so I
> googled it.
> Turns out it is an error message for a keylogger program called Elite
> Keylogger from Widestep Software. The keylogger shuts down after system
> startup which is why I get the error message, but it has slowed startup
> time
> to a crawl. Emailed Widestep for an uninistaller but got no response.
> Norton
> antivirus, windows defender, and spybot search and destroy all scan clean.
> Any suggestions?
 
Hi,

You might try this link for instructions on how to remove it. It's not going
to be easy and I'd advise printing it out and following it to the T. Before
you make any changes be sure to make a manual RESTORE POINT.

http://www.exterminate-it.com/malpedia/rem...elite-keylogger

Given what you have and the fact it works at a Root-Kit level, if it were I,
I would backup everything and do a Format and Reinstall, but that's just me.

--
All the best,
SG

Is your computer system ready for Vista?
https://winqual.microsoft.com/hcl/

"ratimus" wrote in message
news:EB0B1D48-C6D4-4CA8-AF1C-6FB8EA9B9799@microsoft.com...
>I had an error message pop up on my pc, I did not know what it was so I
> googled it.
> Turns out it is an error message for a keylogger program called Elite
> Keylogger from Widestep Software. The keylogger shuts down after system
> startup which is why I get the error message, but it has slowed startup
> time
> to a crawl. Emailed Widestep for an uninistaller but got no response.
> Norton
> antivirus, windows defender, and spybot search and destroy all scan clean.
> Any suggestions?
 
I have lost the logic of why you make this assumption here.
smile.gif
Is it safe to
visit such a link (which I have defaced with XXXX)? Are we suspecting the OP
is infected by a malicious substitute for a benevolent keylogger (if there
is such a thing), or is the link you show almost certainly dangerous to
click on - in which case I would be a bit worried that you give it currency.
I'm not being picky but I am puzzled. Doug

"SG" wrote in message
news:OYMoTcmrIHA.4492@TK2MSFTNGP02.phx.gbl...
> Hi,
>
> I assume you went to this link?
> http://www.wideXXXXstep.com/files/uninstall.html
>
>
>
> --
> All the best,
> SG
>
> Is your computer system ready for Vista?
> https://winqual.microsoft.com/hcl/
>
> "ratimus" wrote in message
> news:EB0B1D48-C6D4-4CA8-AF1C-6FB8EA9B9799@microsoft.com...
>>I had an error message pop up on my pc, I did not know what it was so I
>> googled it.
>> Turns out it is an error message for a keylogger program called Elite
>> Keylogger from Widestep Software. The keylogger shuts down after system
>> startup which is why I get the error message, but it has slowed startup
>> time
>> to a crawl. Emailed Widestep for an uninistaller but got no response.
>> Norton
>> antivirus, windows defender, and spybot search and destroy all scan
>> clean.
>> Any suggestions?
>
 
On Mon, 5 May 2008 00:31:46 -0400, "SG" wrote:

>Given what you have and the fact it works at a Root-Kit level, if it were I,
>I would backup everything and do a Format and Reinstall, but that's just me.

No, that's not just you. It's what any sane person would do in case no
other way of reverting to a known good state exists.
 
Doug,

I HAVE Never and WOULD Never post any site that would be harmful to anyone
in these groups. I've been around many years my friend and many or the
regulars and MVP's can tell you that. I don't suspect the OP is infected, I
know they are. The link is perfectly safe to click on, but for "your"
benefit I will post the contents below. BTW, my assumption came from the
fact the OP said they Googled it and Emailed Widestep for an uninstaller but
got no response.

The link Verbatim:
UNINSTALLATION

There are several ways to uninstall Elite Keylogger. Please, note: the
uninstallation method you choose much depends on the mode you installed
Elite Keylogger in. Since version 3.0, uninstallation process was changed a
bit. Right now the best way to uninstall Elite Keylogger is to use the
"Uninstall keylogger" button in the Options tab of the GUI.

If you installed Elite Keylogger in invisible mode:

Uninstallation from invisible mode can be executed from the configuration
utility or command line. To uninstall Elite Keylogger, please, go to Options
tab and select "Quick Tasks - Uninstall Keylogger".

(Picture Removed)



If you have problems logging into the GUI, please, e-mail us to receive
further instructions, supply your detailed system specifications and exactly
describe the situation that you are having, including what exactly happens
when you try to unhide Elite Keylogger to get into the GUI.

If you installed Elite Keylogger in visible mode or only Logs Viewer:

In this case Elite Keylogger is added to your Add/Remove Programs list, so
you may uninstall it in standard way from there. Alternatively, you may use
the "All Programs - WideStep Elite Keylogger - Uninstall" shortcut which was
also created during the installation.


--
All the best,
SG

Is your computer system ready for Vista?
https://winqual.microsoft.com/hcl/

"Doug" wrote in message
news:OwWS8JorIHA.524@TK2MSFTNGP05.phx.gbl...
>I have lost the logic of why you make this assumption here.
smile.gif
Is it safe
>to visit such a link (which I have defaced with XXXX)? Are we suspecting
>the OP is infected by a malicious substitute for a benevolent keylogger (if
>there is such a thing), or is the link you show almost certainly dangerous
>to click on - in which case I would be a bit worried that you give it
>currency. I'm not being picky but I am puzzled. Doug
>
> "SG" wrote in message
> news:OYMoTcmrIHA.4492@TK2MSFTNGP02.phx.gbl...
>> Hi,
>>
>> I assume you went to this link?
>> http://www.wideXXXXstep.com/files/uninstall.html
>>
>>
>>
>> --
>> All the best,
>> SG
>>
>> Is your computer system ready for Vista?
>> https://winqual.microsoft.com/hcl/
>>
>> "ratimus" wrote in message
>> news:EB0B1D48-C6D4-4CA8-AF1C-6FB8EA9B9799@microsoft.com...
>>>I had an error message pop up on my pc, I did not know what it was so I
>>> googled it.
>>> Turns out it is an error message for a keylogger program called Elite
>>> Keylogger from Widestep Software. The keylogger shuts down after system
>>> startup which is why I get the error message, but it has slowed startup
>>> time
>>> to a crawl. Emailed Widestep for an uninistaller but got no response.
>>> Norton
>>> antivirus, windows defender, and spybot search and destroy all scan
>>> clean.
>>> Any suggestions?
>>
>
 
SQ
My apologies for having had needless misgivings. And many thanks for
clearing up my confusion so that I can follow this thread and perhaps
benefit from it. Regards - Doug

"SG" wrote in message
news:%238973EprIHA.3940@TK2MSFTNGP03.phx.gbl...
> Doug,
>
> I HAVE Never and WOULD Never post any site that would be harmful to anyone
> in these groups. I've been around many years my friend and many or the
> regulars and MVP's can tell you that. I don't suspect the OP is infected,
> I know they are. The link is perfectly safe to click on, but for "your"
> benefit I will post the contents below. BTW, my assumption came from the
> fact the OP said they Googled it and Emailed Widestep for an uninstaller
> but got no response.
>
> The link Verbatim:
> UNINSTALLATION
>
> There are several ways to uninstall Elite Keylogger. Please, note: the
> uninstallation method you choose much depends on the mode you installed
> Elite Keylogger in. Since version 3.0, uninstallation process was changed
> a bit. Right now the best way to uninstall Elite Keylogger is to use the
> "Uninstall keylogger" button in the Options tab of the GUI.
>
> If you installed Elite Keylogger in invisible mode:
>
> Uninstallation from invisible mode can be executed from the configuration
> utility or command line. To uninstall Elite Keylogger, please, go to
> Options tab and select "Quick Tasks - Uninstall Keylogger".
>
> (Picture Removed)
>
>
>
> If you have problems logging into the GUI, please, e-mail us to receive
> further instructions, supply your detailed system specifications and
> exactly describe the situation that you are having, including what exactly
> happens when you try to unhide Elite Keylogger to get into the GUI.
>
> If you installed Elite Keylogger in visible mode or only Logs Viewer:
>
> In this case Elite Keylogger is added to your Add/Remove Programs list, so
> you may uninstall it in standard way from there. Alternatively, you may
> use the "All Programs - WideStep Elite Keylogger - Uninstall" shortcut
> which was also created during the installation.
>
>
> --
> All the best,
> SG
>
> Is your computer system ready for Vista?
> https://winqual.microsoft.com/hcl/
>
> "Doug" wrote in message
> news:OwWS8JorIHA.524@TK2MSFTNGP05.phx.gbl...
>>I have lost the logic of why you make this assumption here.
smile.gif
Is it safe
>>to visit such a link (which I have defaced with XXXX)? Are we suspecting
>>the OP is infected by a malicious substitute for a benevolent keylogger
>>(if there is such a thing), or is the link you show almost certainly
>>dangerous to click on - in which case I would be a bit worried that you
>>give it currency. I'm not being picky but I am puzzled. Doug
>>
>> "SG" wrote in message
>> news:OYMoTcmrIHA.4492@TK2MSFTNGP02.phx.gbl...
>>> Hi,
>>>
>>> I assume you went to this link?
>>> http://www.wideXXXXstep.com/files/uninstall.html
>>>
>>>
>>>
>>> --
>>> All the best,
>>> SG
>>>
>>> Is your computer system ready for Vista?
>>> https://winqual.microsoft.com/hcl/
>>>
>>> "ratimus" wrote in message
>>> news:EB0B1D48-C6D4-4CA8-AF1C-6FB8EA9B9799@microsoft.com...
>>>>I had an error message pop up on my pc, I did not know what it was so I
>>>> googled it.
>>>> Turns out it is an error message for a keylogger program called Elite
>>>> Keylogger from Widestep Software. The keylogger shuts down after system
>>>> startup which is why I get the error message, but it has slowed startup
>>>> time
>>>> to a crawl. Emailed Widestep for an uninistaller but got no response.
>>>> Norton
>>>> antivirus, windows defender, and spybot search and destroy all scan
>>>> clean.
>>>> Any suggestions?
>>>
>>
>
 
Hi Doug,

No apologies necessary, we don't always read into what one may post and
sometimes we think it's one way when it's another. I see so far the OP
hasn't responded, so we will wait and see.

--
All the best,
SG

Is your computer system ready for Vista?
https://winqual.microsoft.com/hcl/

"Doug" wrote in message
news:Oc7zpturIHA.3804@TK2MSFTNGP02.phx.gbl...
> SQ
> My apologies for having had needless misgivings. And many thanks for
> clearing up my confusion so that I can follow this thread and perhaps
> benefit from it. Regards - Doug
>
> "SG" wrote in message
> news:%238973EprIHA.3940@TK2MSFTNGP03.phx.gbl...
>> Doug,
>>
>> I HAVE Never and WOULD Never post any site that would be harmful to
>> anyone in these groups. I've been around many years my friend and many or
>> the regulars and MVP's can tell you that. I don't suspect the OP is
>> infected, I know they are. The link is perfectly safe to click on, but
>> for "your" benefit I will post the contents below. BTW, my assumption
>> came from the fact the OP said they Googled it and Emailed Widestep for
>> an uninstaller but got no response.
>>
>> The link Verbatim:
>> UNINSTALLATION
>>
>> There are several ways to uninstall Elite Keylogger. Please, note: the
>> uninstallation method you choose much depends on the mode you installed
>> Elite Keylogger in. Since version 3.0, uninstallation process was changed
>> a bit. Right now the best way to uninstall Elite Keylogger is to use the
>> "Uninstall keylogger" button in the Options tab of the GUI.
>>
>> If you installed Elite Keylogger in invisible mode:
>>
>> Uninstallation from invisible mode can be executed from the configuration
>> utility or command line. To uninstall Elite Keylogger, please, go to
>> Options tab and select "Quick Tasks - Uninstall Keylogger".
>>
>> (Picture Removed)
>>
>>
>>
>> If you have problems logging into the GUI, please, e-mail us to receive
>> further instructions, supply your detailed system specifications and
>> exactly describe the situation that you are having, including what
>> exactly happens when you try to unhide Elite Keylogger to get into the
>> GUI.
>>
>> If you installed Elite Keylogger in visible mode or only Logs Viewer:
>>
>> In this case Elite Keylogger is added to your Add/Remove Programs list,
>> so you may uninstall it in standard way from there. Alternatively, you
>> may use the "All Programs - WideStep Elite Keylogger - Uninstall"
>> shortcut which was also created during the installation.
>>
>>
>> --
>> All the best,
>> SG
>>
>> Is your computer system ready for Vista?
>> https://winqual.microsoft.com/hcl/
>>
>> "Doug" wrote in message
>> news:OwWS8JorIHA.524@TK2MSFTNGP05.phx.gbl...
>>>I have lost the logic of why you make this assumption here.
smile.gif
Is it safe
>>>to visit such a link (which I have defaced with XXXX)? Are we suspecting
>>>the OP is infected by a malicious substitute for a benevolent keylogger
>>>(if there is such a thing), or is the link you show almost certainly
>>>dangerous to click on - in which case I would be a bit worried that you
>>>give it currency. I'm not being picky but I am puzzled. Doug
>>>
>>> "SG" wrote in message
>>> news:OYMoTcmrIHA.4492@TK2MSFTNGP02.phx.gbl...
>>>> Hi,
>>>>
>>>> I assume you went to this link?
>>>> http://www.wideXXXXstep.com/files/uninstall.html
>>>>
>>>>
>>>>
>>>> --
>>>> All the best,
>>>> SG
>>>>
>>>> Is your computer system ready for Vista?
>>>> https://winqual.microsoft.com/hcl/
>>>>
>>>> "ratimus" wrote in message
>>>> news:EB0B1D48-C6D4-4CA8-AF1C-6FB8EA9B9799@microsoft.com...
>>>>>I had an error message pop up on my pc, I did not know what it was so I
>>>>> googled it.
>>>>> Turns out it is an error message for a keylogger program called Elite
>>>>> Keylogger from Widestep Software. The keylogger shuts down after
>>>>> system
>>>>> startup which is why I get the error message, but it has slowed
>>>>> startup time
>>>>> to a crawl. Emailed Widestep for an uninistaller but got no response.
>>>>> Norton
>>>>> antivirus, windows defender, and spybot search and destroy all scan
>>>>> clean.
>>>>> Any suggestions?
>>>>
>>>
>>
>
 
Tap F8 right at startup, and go into Safe Mode.
Run the scans from in there again.
--
Mick Murphy - Qld - Australia


"ratimus" wrote:

> I had an error message pop up on my pc, I did not know what it was so I
> googled it.
> Turns out it is an error message for a keylogger program called Elite
> Keylogger from Widestep Software. The keylogger shuts down after system
> startup which is why I get the error message, but it has slowed startup time
> to a crawl. Emailed Widestep for an uninistaller but got no response. Norton
> antivirus, windows defender, and spybot search and destroy all scan clean.
> Any suggestions?
 
I was able to remove keylogger.overspy from my system today using Uniblue
SpyEraser (UniBlue advertises as Microsoft Gold Certified Partner). Neither
CA or MacAfee’s security suites stopped, found or eradicated it. Microsoft's
One software didn't find it either.

Uniblue SpyEraser may be able to take care of your keylogger problem too.
www.uniblue.com

Hope this helps :>)


-T

"Mick Murphy" wrote:

> Tap F8 right at startup, and go into Safe Mode.
> Run the scans from in there again.
> --
> Mick Murphy - Qld - Australia
>
>
> "ratimus" wrote:
>
> > I had an error message pop up on my pc, I did not know what it was so I
> > googled it.
> > Turns out it is an error message for a keylogger program called Elite
> > Keylogger from Widestep Software. The keylogger shuts down after system
> > startup which is why I get the error message, but it has slowed startup time
> > to a crawl. Emailed Widestep for an uninistaller but got no response. Norton
> > antivirus, windows defender, and spybot search and destroy all scan clean.
> > Any suggestions?
 
try installing and running superantispyware
you can get it at superantispyware.com

robin
"True" wrote in message
news:DC202A6E-1444-41C6-8755-4E5837669AAE@microsoft.com...
>I was able to remove keylogger.overspy from my system today using Uniblue
> SpyEraser (UniBlue advertises as Microsoft Gold Certified Partner).
> Neither
> CA or MacAfee’s security suites stopped, found or eradicated it.
> Microsoft's
> One software didn't find it either.
>
> Uniblue SpyEraser may be able to take care of your keylogger problem too.
> www.uniblue.com
>
> Hope this helps :>)
>
>
> -T
>
> "Mick Murphy" wrote:
>
>> Tap F8 right at startup, and go into Safe Mode.
>> Run the scans from in there again.
>> --
>> Mick Murphy - Qld - Australia
>>
>>
>> "ratimus" wrote:
>>
>> > I had an error message pop up on my pc, I did not know what it was so I
>> > googled it.
>> > Turns out it is an error message for a keylogger program called Elite
>> > Keylogger from Widestep Software. The keylogger shuts down after system
>> > startup which is why I get the error message, but it has slowed startup
>> > time
>> > to a crawl. Emailed Widestep for an uninistaller but got no response.
>> > Norton
>> > antivirus, windows defender, and spybot search and destroy all scan
>> > clean.
>> > Any suggestions?
 
Back
Top