Threat info: Spyware Online Recorder is one of the latest spyware circulating on the Internet and infecting end-user PCs with the help of auxiliary malware. It is installed by Trojans while visiting misleading websites or when downloading and attempting to install fake security applications or infected codec pack. According to antivirus researchers, it can affect the functionality of Windows 98, Windows 95, Windows XP, Windows Me, Windows Vista, Windows NT, Windows Server 2003 and Windows 2000.
» Download Spyware Online Recorder Removal Software
OnlineRecorder is a malicious software application that can record Yahoo and AOL instant messages. Also it can record the URLs in browsers, and every keystroke. When this malware is installed the following main executable file alongside its DLL resource are created in a common path:
• %System%\orec32.exe
• %System%\keys32.dll
For this reason, when deciding to remove OnlineRecorder it is recommended to first disable the executable process “orec32.exe” as it is the main program responsible for the majority of the spyware’s functionality.
File Removal Procedures
Online Recorder is malicious software, reason why it is recommended to delete it as soon as possible. However, due to the complexity of its nature it is required to scan the entire computer using genuine antivirus software such as Spyware Doctor with Antivirus in order to make sure that no other malware are present in the system.
Once this is done, it is possible to delete the following files used by the spyware to record instant messages as well as other private data resulted from the local Internet traffic:
• %System%\acndex.rec
• %System%\aindex.rec
• %System%\apndex.rec
• %System%\cindex.rec
• %System%\custom.rec
• %System%\iindex.rec
• %System%\kindex.rec
• %System%\mindex.rec
• %System%\mpndex.rec
• %System%\opndex.rec
• %System%\p1.rec
• %System%\rindex.rec
• %System%\sindex.rec
• %System%\time.rec
• %System%\uindex.rec
• %System%\wi1.rec
• %System%\windex.rec
• %System%\wit1.rec
• %System%\yindex.rec
• %System%\ypndex.rec
• %System%\orec32.exe
• %System%\keys32.dll
Registry Removal Procedures
Registry removal is a very important part required in the process of removing the spyware OnlineRecorder. For this reason, users must delete the following registry entries:
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"orec32" = "C:\WINDOWS\system32\orec32\orec32.exe"
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{308EF137-9A2D-46B6-91C6-22A7E423E009}
Outside Resources:
Speak Your Mind