Spyware Online Recorder

Threat info: Spyware Online Recorder is one of the latest spyware circulating on the Internet and infecting end-user PCs with the help of auxiliary malware. It is installed by Trojans while visiting misleading websites or when downloading and attempting to install fake security applications or infected codec pack. According to antivirus researchers, it can affect the functionality of Windows 98, Windows 95, Windows XP, Windows Me, Windows Vista, Windows NT, Windows Server 2003 and Windows 2000.

» Download Spyware Online Recorder Removal Software

OnlineRecorder is a malicious software application that can record Yahoo and AOL instant messages. Also it can record the URLs in browsers, and every keystroke. When this malware is installed the following main executable file alongside its DLL resource are created in a common path:

•    %System%orec32.exe
•    %System%keys32.dll

For this reason, when deciding to remove OnlineRecorder it is recommended to first disable the executable process “orec32.exe” as it is the main program responsible for the majority of the spyware’s functionality.
File Removal Procedures

Online Recorder is malicious software, reason why it is recommended to delete it as soon as possible. However, due to the complexity of its nature it is required to scan the entire computer using genuine antivirus software such as Spyware Doctor with Antivirus in order to make sure that no other malware are present in the system.

Once this is done, it is possible to delete the following files used by the spyware to record instant messages as well as other private data resulted from the local Internet traffic:

•    %System%acndex.rec
•    %System%aindex.rec
•    %System%apndex.rec
•    %System%cindex.rec
•    %System%custom.rec
•    %System%iindex.rec
•    %System%kindex.rec
•    %System%mindex.rec
•    %System%mpndex.rec
•    %System%opndex.rec
•    %System%p1.rec
•    %System%rindex.rec
•    %System%sindex.rec
•    %System%time.rec
•    %System%uindex.rec
•    %System%wi1.rec
•    %System%windex.rec
•    %System%wit1.rec
•    %System%yindex.rec
•    %System%ypndex.rec
•    %System%orec32.exe
•    %System%keys32.dll

Registry Removal Procedures

Registry removal is a very important part required in the process of removing the spyware OnlineRecorder. For this reason, users must delete the following registry entries:

•    HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun"orec32" = "C:WINDOWSsystem32orec32orec32.exe"
•    HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstall{308EF137-9A2D-46B6-91C6-22A7E423E009}

Conclusion

It is recommended to consider the online computer repair service www.pcninja.com when dealing with an infection such as OnlineRecorder due to the fact that the spyware application is capable to re-infect the system if all of its components are not properly quarantined and removed.

Other Software clients that Removevirus.org likes to use

• Spyware Doctor with Antivirus
• Norton
• Trend Micro
• Kaspersky
• AVG
• MalwareBytes

As always please post updates to the file traces. If yours are different then other users will find it helpful.