Lsas.Blaster.Keylogger removal guide

All Replies

• Saturday, December 17, 2011 11:14 PM

   

   
  

  0

  i have this virus rigth now and i try to deleted but is imposivble. i need help . or i go to broke this laptop who send this virus  why microsoft dont tell this to all world and find the responsable

   

  • Reply
  • Quote

   
• Monday, December 19, 2011 4:17 PM

   

   
  

  0

  Hi Try following these steps.

  1. Open Task Manager (CTRL+SHIFT+ESC)

  Stop these Lsas.Blaster.Keylogger processes:

  unins000.exe
  VDoca582.exe

  2. Delete these Lsas.Blaster.Keylogger DLL files::

  mozcrt19.dll
  sqlite3.dll

  3. Open Registry Editor and Remove these Lsas.Blaster.Keylogger Registry Entries:

  HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Virus Doctor”

  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Virus Doctor_is1

  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform “URVDoc[]”

  4. Delete Following Files.

  %UserProfile%\Application Data\Virus Doctor\uill.ini
  c:\Documents and Settings\All Users\Application Data\System Data Configuration\DB.ini
  c:\Documents and Settings\All Users\Application Data\System Data Configuration\fsvd6398.db
  c:\Documents and Settings\All Users\Application Data\System Data Configuration\config.cfg
  c:\Documents and Settings\All Users\Application Data\927e\Languages\VDDe.lng
  c:\Documents and Settings\All Users\Application Data\927e\System Data Configuration\DBInfo.ver
  c:\Documents and Settings\All Users\Application Data\927e\Languages\VDFr.lng
  c:\Documents and Settings\All Users\Application Data\927e\Languages\VDIt.lng
  c:\Documents and Settings\All Users\Application Data\927e\System Data Configuration
  c:\Documents and Settings\All Users\Application Data\927e\System Data Configuration\vd952342.bd
  c:\Documents and Settings\All Users\Application Data\System Data Configuration

   

  Let me know if this works

  • Reply
  • Quote