Windows Vista Beta | WinVistaBeta.com - Message | How can i get rid of this keylogger?

July 05, 2008  
Subject: How can i get rid of this keylogger?
Group: microsoft.public.windows.vista.security
Date: 5/4/2008 3:20:01 PM
From: =?Utf-8?B?cmF0aW11cw==?= [Email Address Protection]

I had an error message pop up on my pc, I did not know what it was so I
googled it.
Turns out it is an error message for a keylogger program called Elite
Keylogger from Widestep Software. The keylogger shuts down after system
startup which is why I get the error message, but it has slowed startup time
to a crawl. Emailed Widestep for an uninistaller but got no response. Norton
antivirus, windows defender, and spybot search and destroy all scan clean.
Any suggestions?

Back
Subject: Re: How can i get rid of this keylogger?
Group: microsoft.public.windows.vista.security
Date: 5/4/2008 3:41:45 PM
From: "Milo" [Email Address Protection]

Since you already know the name well its going be easier to look for it also

Use Hijackthis to view your startup list ( 04/ or worst 023 area ).

get it here.....
http://www.trendsecure.com

"ratimus" <ratimus@discussions.microsoft.com> wrote in message
news:EB0B1D48-C6D4-4CA8-AF1C-6FB8EA9B9799@microsoft.com...
> I had an error message pop up on my pc, I did not know what it was so I
> googled it.
> Turns out it is an error message for a keylogger program called Elite
> Keylogger from Widestep Software. The keylogger shuts down after system
> startup which is why I get the error message, but it has slowed startup
> time
> to a crawl. Emailed Widestep for an uninistaller but got no response.
> Norton
> antivirus, windows defender, and spybot search and destroy all scan clean.
> Any suggestions?


Back
Subject: Re: How can i get rid of this keylogger?
Group: microsoft.public.windows.vista.security
Date: 5/4/2008 9:18:34 PM
From: "SG" [Email Address Protection]

Hi,

I assume you went to this link?
http://www.widestep.com/files/uninstall.html



--
All the best,
SG

Is your computer system ready for Vista?
https://winqual.microsoft.com/hcl/

"ratimus" <ratimus@discussions.microsoft.com> wrote in message
news:EB0B1D48-C6D4-4CA8-AF1C-6FB8EA9B9799@microsoft.com...
>I had an error message pop up on my pc, I did not know what it was so I
> googled it.
> Turns out it is an error message for a keylogger program called Elite
> Keylogger from Widestep Software. The keylogger shuts down after system
> startup which is why I get the error message, but it has slowed startup
> time
> to a crawl. Emailed Widestep for an uninistaller but got no response.
> Norton
> antivirus, windows defender, and spybot search and destroy all scan clean.
> Any suggestions?


Back
Subject: Re: How can i get rid of this keylogger?
Group: microsoft.public.windows.vista.security
Date: 5/4/2008 9:31:46 PM
From: "SG" [Email Address Protection]

Hi,

You might try this link for instructions on how to remove it. It's not going
to be easy and I'd advise printing it out and following it to the T. Before
you make any changes be sure to make a manual RESTORE POINT.

http://www.exterminate-it.com/malpedia/remove-elite-keylogger

Given what you have and the fact it works at a Root-Kit level, if it were I,
I would backup everything and do a Format and Reinstall, but that's just me.

--
All the best,
SG

Is your computer system ready for Vista?
https://winqual.microsoft.com/hcl/

"ratimus" <ratimus@discussions.microsoft.com> wrote in message
news:EB0B1D48-C6D4-4CA8-AF1C-6FB8EA9B9799@microsoft.com...
>I had an error message pop up on my pc, I did not know what it was so I
> googled it.
> Turns out it is an error message for a keylogger program called Elite
> Keylogger from Widestep Software. The keylogger shuts down after system
> startup which is why I get the error message, but it has slowed startup
> time
> to a crawl. Emailed Widestep for an uninistaller but got no response.
> Norton
> antivirus, windows defender, and spybot search and destroy all scan clean.
> Any suggestions?


Back
Subject: Re: How can i get rid of this keylogger?
Group: microsoft.public.windows.vista.security
Date: 5/5/2008 12:32:55 AM
From: "Doug" [Email Address Protection]

I have lost the logic of why you make this assumption here. :) Is it safe to
visit such a link (which I have defaced with XXXX)? Are we suspecting the OP
is infected by a malicious substitute for a benevolent keylogger (if there
is such a thing), or is the link you show almost certainly dangerous to
click on - in which case I would be a bit worried that you give it currency.
I'm not being picky but I am puzzled. Doug

"SG" <sorry@nomail.com> wrote in message
news:OYMoTcmrIHA.4492@TK2MSFTNGP02.phx.gbl...
> Hi,
>
> I assume you went to this link?
> http://www.wideXXXXstep.com/files/uninstall.html
>
>
>
> --
> All the best,
> SG
>
> Is your computer system ready for Vista?
> https://winqual.microsoft.com/hcl/
>
> "ratimus" <ratimus@discussions.microsoft.com> wrote in message
> news:EB0B1D48-C6D4-4CA8-AF1C-6FB8EA9B9799@microsoft.com...
>>I had an error message pop up on my pc, I did not know what it was so I
>> googled it.
>> Turns out it is an error message for a keylogger program called Elite
>> Keylogger from Widestep Software. The keylogger shuts down after system
>> startup which is why I get the error message, but it has slowed startup
>> time
>> to a crawl. Emailed Widestep for an uninistaller but got no response.
>> Norton
>> antivirus, windows defender, and spybot search and destroy all scan
>> clean.
>> Any suggestions?
>


Back
Subject: Re: How can i get rid of this keylogger?
Group: microsoft.public.windows.vista.security
Date: 5/5/2008 1:02:20 AM
From: Straight Talk [Email Address Protection]

On Mon, 5 May 2008 00:31:46 -0400, "SG" <sorry@nomail.com> wrote:

>Given what you have and the fact it works at a Root-Kit level, if it were I,
>I would backup everything and do a Format and Reinstall, but that's just me.

No, that's not just you. It's what any sane person would do in case no
other way of reverting to a known good state exists.

Back
Subject: Re: How can i get rid of this keylogger?
Group: microsoft.public.windows.vista.security
Date: 5/5/2008 2:20:15 AM
From: "SG" [Email Address Protection]

Doug,

I HAVE Never and WOULD Never post any site that would be harmful to anyone
in these groups. I've been around many years my friend and many or the
regulars and MVP's can tell you that. I don't suspect the OP is infected, I
know they are. The link is perfectly safe to click on, but for "your"
benefit I will post the contents below. BTW, my assumption came from the
fact the OP said they Googled it and Emailed Widestep for an uninstaller but
got no response.

The link Verbatim:
UNINSTALLATION

There are several ways to uninstall Elite Keylogger. Please, note: the
uninstallation method you choose much depends on the mode you installed
Elite Keylogger in. Since version 3.0, uninstallation process was changed a
bit. Right now the best way to uninstall Elite Keylogger is to use the
"Uninstall keylogger" button in the Options tab of the GUI.

If you installed Elite Keylogger in invisible mode:

Uninstallation from invisible mode can be executed from the configuration
utility or command line. To uninstall Elite Keylogger, please, go to Options
tab and select "Quick Tasks - Uninstall Keylogger".

(Picture Removed)



If you have problems logging into the GUI, please, e-mail us to receive
further instructions, supply your detailed system specifications and exactly
describe the situation that you are having, including what exactly happens
when you try to unhide Elite Keylogger to get into the GUI.

If you installed Elite Keylogger in visible mode or only Logs Viewer:

In this case Elite Keylogger is added to your Add/Remove Programs list, so
you may uninstall it in standard way from there. Alternatively, you may use
the "All Programs - WideStep Elite Keylogger - Uninstall" shortcut which was
also created during the installation.


--
All the best,
SG

Is your computer system ready for Vista?
https://winqual.microsoft.com/hcl/

"Doug" <doug@FAKEpleasereplytogroup.com> wrote in message
news:OwWS8JorIHA.524@TK2MSFTNGP05.phx.gbl...
>I have lost the logic of why you make this assumption here. :) Is it safe
>to visit such a link (which I have defaced with XXXX)? Are we suspecting
>the OP is infected by a malicious substitute for a benevolent keylogger (if
>there is such a thing), or is the link you show almost certainly dangerous
>to click on - in which case I would be a bit worried that you give it
>currency. I'm not being picky but I am puzzled. Doug
>
> "SG" <sorry@nomail.com> wrote in message
> news:OYMoTcmrIHA.4492@TK2MSFTNGP02.phx.gbl...
>> Hi,
>>
>> I assume you went to this link?
>> http://www.wideXXXXstep.com/files/uninstall.html
>>
>>
>>
>> --
>> All the best,
>> SG
>>
>> Is your computer system ready for Vista?
>> https://winqual.microsoft.com/hcl/
>>
>> "ratimus" <ratimus@discussions.microsoft.com> wrote in message
>> news:EB0B1D48-C6D4-4CA8-AF1C-6FB8EA9B9799@microsoft.com...
>>>I had an error message pop up on my pc, I did not know what it was so I
>>> googled it.
>>> Turns out it is an error message for a keylogger program called Elite
>>> Keylogger from Widestep Software. The keylogger shuts down after system
>>> startup which is why I get the error message, but it has slowed startup
>>> time
>>> to a crawl. Emailed Widestep for an uninistaller but got no response.
>>> Norton
>>> antivirus, windows defender, and spybot search and destroy all scan
>>> clean.
>>> Any suggestions?
>>
>


Back
Subject: Re: How can i get rid of this keylogger?
Group: microsoft.public.windows.vista.security
Date: 5/5/2008 1:05:28 PM
From: "Doug" [Email Address Protection]

SQ
My apologies for having had needless misgivings. And many thanks for
clearing up my confusion so that I can follow this thread and perhaps
benefit from it. Regards - Doug

"SG" <sorry@nomail.com> wrote in message
news:%238973EprIHA.3940@TK2MSFTNGP03.phx.gbl...
> Doug,
>
> I HAVE Never and WOULD Never post any site that would be harmful to anyone
> in these groups. I've been around many years my friend and many or the
> regulars and MVP's can tell you that. I don't suspect the OP is infected,
> I know they are. The link is perfectly safe to click on, but for "your"
> benefit I will post the contents below. BTW, my assumption came from the
> fact the OP said they Googled it and Emailed Widestep for an uninstaller
> but got no response.
>
> The link Verbatim:
> UNINSTALLATION
>
> There are several ways to uninstall Elite Keylogger. Please, note: the
> uninstallation method you choose much depends on the mode you installed
> Elite Keylogger in. Since version 3.0, uninstallation process was changed
> a bit. Right now the best way to uninstall Elite Keylogger is to use the
> "Uninstall keylogger" button in the Options tab of the GUI.
>
> If you installed Elite Keylogger in invisible mode:
>
> Uninstallation from invisible mode can be executed from the configuration
> utility or command line. To uninstall Elite Keylogger, please, go to
> Options tab and select "Quick Tasks - Uninstall Keylogger".
>
> (Picture Removed)
>
>
>
> If you have problems logging into the GUI, please, e-mail us to receive
> further instructions, supply your detailed system specifications and
> exactly describe the situation that you are having, including what exactly
> happens when you try to unhide Elite Keylogger to get into the GUI.
>
> If you installed Elite Keylogger in visible mode or only Logs Viewer:
>
> In this case Elite Keylogger is added to your Add/Remove Programs list, so
> you may uninstall it in standard way from there. Alternatively, you may
> use the "All Programs - WideStep Elite Keylogger - Uninstall" shortcut
> which was also created during the installation.
>
>
> --
> All the best,
> SG
>
> Is your computer system ready for Vista?
> https://winqual.microsoft.com/hcl/
>
> "Doug" <doug@FAKEpleasereplytogroup.com> wrote in message
> news:OwWS8JorIHA.524@TK2MSFTNGP05.phx.gbl...
>>I have lost the logic of why you make this assumption here. :) Is it safe
>>to visit such a link (which I have defaced with XXXX)? Are we suspecting
>>the OP is infected by a malicious substitute for a benevolent keylogger
>>(if there is such a thing), or is the link you show almost certainly
>>dangerous to click on - in which case I would be a bit worried that you
>>give it currency. I'm not being picky but I am puzzled. Doug
>>
>> "SG" <sorry@nomail.com> wrote in message
>> news:OYMoTcmrIHA.4492@TK2MSFTNGP02.phx.gbl...
>>> Hi,
>>>
>>> I assume you went to this link?
>>> http://www.wideXXXXstep.com/files/uninstall.html
>>>
>>>
>>>
>>> --
>>> All the best,
>>> SG
>>>
>>> Is your computer system ready for Vista?
>>> https://winqual.microsoft.com/hcl/
>>>
>>> "ratimus" <ratimus@discussions.microsoft.com> wrote in message
>>> news:EB0B1D48-C6D4-4CA8-AF1C-6FB8EA9B9799@microsoft.com...
>>>>I had an error message pop up on my pc, I did not know what it was so I
>>>> googled it.
>>>> Turns out it is an error message for a keylogger program called Elite
>>>> Keylogger from Widestep Software. The keylogger shuts down after system
>>>> startup which is why I get the error message, but it has slowed startup
>>>> time
>>>> to a crawl. Emailed Widestep for an uninistaller but got no response.
>>>> Norton
>>>> antivirus, windows defender, and spybot search and destroy all scan
>>>> clean.
>>>> Any suggestions?
>>>
>>
>


Back
Subject: Re: How can i get rid of this keylogger?
Group: microsoft.public.windows.vista.security
Date: 5/5/2008 4:57:50 PM
From: "SG" [Email Address Protection]

Hi Doug,

No apologies necessary, we don't always read into what one may post and
sometimes we think it's one way when it's another. I see so far the OP
hasn't responded, so we will wait and see.

--
All the best,
SG

Is your computer system ready for Vista?
https://winqual.microsoft.com/hcl/

"Doug" <doug@FAKEpleasereplytogroup.com> wrote in message
news:Oc7zpturIHA.3804@TK2MSFTNGP02.phx.gbl...
> SQ
> My apologies for having had needless misgivings. And many thanks for
> clearing up my confusion so that I can follow this thread and perhaps
> benefit from it. Regards - Doug
>
> "SG" <sorry@nomail.com> wrote in message
> news:%238973EprIHA.3940@TK2MSFTNGP03.phx.gbl...
>> Doug,
>>
>> I HAVE Never and WOULD Never post any site that would be harmful to
>> anyone in these groups. I've been around many years my friend and many or
>> the regulars and MVP's can tell you that. I don't suspect the OP is
>> infected, I know they are. The link is perfectly safe to click on, but
>> for "your" benefit I will post the contents below. BTW, my assumption
>> came from the fact the OP said they Googled it and Emailed Widestep for
>> an uninstaller but got no response.
>>
>> The link Verbatim:
>> UNINSTALLATION
>>
>> There are several ways to uninstall Elite Keylogger. Please, note: the
>> uninstallation method you choose much depends on the mode you installed
>> Elite Keylogger in. Since version 3.0, uninstallation process was changed
>> a bit. Right now the best way to uninstall Elite Keylogger is to use the
>> "Uninstall keylogger" button in the Options tab of the GUI.
>>
>> If you installed Elite Keylogger in invisible mode:
>>
>> Uninstallation from invisible mode can be executed from the configuration
>> utility or command line. To uninstall Elite Keylogger, please, go to
>> Options tab and select "Quick Tasks - Uninstall Keylogger".
>>
>> (Picture Removed)
>>
>>
>>
>> If you have problems logging into the GUI, please, e-mail us to receive
>> further instructions, supply your detailed system specifications and
>> exactly describe the situation that you are having, including what
>> exactly happens when you try to unhide Elite Keylogger to get into the
>> GUI.
>>
>> If you installed Elite Keylogger in visible mode or only Logs Viewer:
>>
>> In this case Elite Keylogger is added to your Add/Remove Programs list,
>> so you may uninstall it in standard way from there. Alternatively, you
>> may use the "All Programs - WideStep Elite Keylogger - Uninstall"
>> shortcut which was also created during the installation.
>>
>>
>> --
>> All the best,
>> SG
>>
>> Is your computer system ready for Vista?
>> https://winqual.microsoft.com/hcl/
>>
>> "Doug" <doug@FAKEpleasereplytogroup.com> wrote in message
>> news:OwWS8JorIHA.524@TK2MSFTNGP05.phx.gbl...
>>>I have lost the logic of why you make this assumption here. :) Is it safe
>>>to visit such a link (which I have defaced with XXXX)? Are we suspecting
>>>the OP is infected by a malicious substitute for a benevolent keylogger
>>>(if there is such a thing), or is the link you show almost certainly
>>>dangerous to click on - in which case I would be a bit worried that you
>>>give it currency. I'm not being picky but I am puzzled. Doug
>>>
>>> "SG" <sorry@nomail.com> wrote in message
>>> news:OYMoTcmrIHA.4492@TK2MSFTNGP02.phx.gbl...
>>>> Hi,
>>>>
>>>> I assume you went to this link?
>>>> http://www.wideXXXXstep.com/files/uninstall.html
>>>>
>>>>
>>>>
>>>> --
>>>> All the best,
>>>> SG
>>>>
>>>> Is your computer system ready for Vista?
>>>> https://winqual.microsoft.com/hcl/
>>>>
>>>> "ratimus" <ratimus@discussions.microsoft.com> wrote in message
>>>> news:EB0B1D48-C6D4-4CA8-AF1C-6FB8EA9B9799@microsoft.com...
>>>>>I had an error message pop up on my pc, I did not know what it was so I
>>>>> googled it.
>>>>> Turns out it is an error message for a keylogger program called Elite
>>>>> Keylogger from Widestep Software. The keylogger shuts down after
>>>>> system
>>>>> startup which is why I get the error message, but it has slowed
>>>>> startup time
>>>>> to a crawl. Emailed Widestep for an uninistaller but got no response.
>>>>> Norton
>>>>> antivirus, windows defender, and spybot search and destroy all scan
>>>>> clean.
>>>>> Any suggestions?
>>>>
>>>
>>
>


Back