Free Spyware Scan!
   Internet Security Suite
   Norton AntiVirus 2006
   Anti-Spyware from CA
   Secure private data!

Digital River oneNetwork 2.0 - Make Money!

AceSpy Removal Instructions

Description: 
Remove Spyware

Spyware Threat Level

AceSpy is a Keylogger program developed by Retina-X Studios. It monitors user's activities, takes screenshots, logs keystrokes and send it to a specified address through email or FTP server. AceSpy can be installed both in stealth and administrator mode.

CA - eTrust PestPatrol Anti-Spywar

Warning: 
  • This page provides AceSpy removal information "AS IS" without a warranty of any kind. You are advised not to use this information if you are not aware of what you are doing. It must be noted that wrongly using the below given information to remove AceSpy from you PC may generated unexpected results. You must take a registry back and create a System Restore Point before following the below given instructions.

Important Instructions: 
  1. Please do not delete any directory unless you are sure that it is related with AceSpy. Check 'C:\Program Files\', 'C:\Temp', 'C:\Tmp', 'C:\Documents and Settings\(your profile name)\Local Settings\Temp' and/or 'C:\Documents and Settings\All Users\Local Settings\Temp' for these directories. These directories may also exists in 'C:\Windows' directory but deleting a legitimate directory from 'C:\Windows' or sub directories may result in system failure so make sure you have found what you were looking for before deleting any directory. Always use 'System Restore' before following spyware removal instructions.
  2. Files created by AceSpy must be removed either by using Add / Remove Programs Utility or simply deleting them using Windows Explorer. Note that some EXE files that are running i.e. processes, will not be deleted unless you use Task Manager to kill these processes.
  3. Please take a registry backup using 'regedit.exe' or create a system restore point using 'System Restore Utility' before following these steps. Note that removing legitimate registry entries may result in a system crash.

Symantec's Norton Internet Security 2006

Remove these directories: 
  1. Retina-XStudios
  2. AceSpy
  3. %programfilesdir% \ Retina-XStudios \ AceSpy \ LOGS \ appcache
  4. clipcache
  5. %programfilesdir% \ Retina-XStudios \ AceSpy \ LOGS \ emailcache
  6. %programfilesdir% \ Retina-XStudios \ AceSpy \ LOGS \ eventcache
  7. iecache
  8. %programfilesdir% \ Retina-XStudios \ AceSpy \ LOGS \ keycache
  9. msgcache
  10. prncache
  11. %programfilesdir% \ Retina-XStudios \ AceSpy \ LOGS \ recentcache
  12. scrcache
  13. %programfilesdir% \ Retina-XStudios \ AceSpy \ LOGS \ taskcache
  14. %programfilesdir% \ Retina-XStudios \ AceSpy \ LOGS \ wincache
  15. LOGS
  16. %programfilesdir% \ Retina-XStudios \ AceSpy \ LOGS \ acecache
  17. %commonprogramsdir% \ AceSpy
  18. AceSpy
  19. %systemdir% \ AceSpy \ Manual

Remove these files: 
  1. acespy.url
  2. ansmtp.dll
  3. %programfilesdir% \ Retina-XStudios \ AceSpy \ chathandler.dll
  4. contlist.ndx
  5. %programfilesdir% \ Retina-XStudios \ AceSpy \ dscbtshl.dll
  6. %programfilesdir% \ Retina-XStudios \ AceSpy \ emailcatcher.dll
  7. getCurrentURL.dll
  8. %programfilesdir% \ Retina-XStudios \ AceSpy \ help.htm
  9. hideProcess.dll
  10. ijl11.dll
  11. %programfilesdir% \ Retina-XStudios \ AceSpy \ IShellLink.tlb
  12. keyboard.dll
  13. keylist.ndx
  14. %programfilesdir% \ Retina-XStudios \ AceSpy \ Legal.txt
  15. regsvc.exe
  16. %programfilesdir% \ Retina-XStudios \ AceSpy \ shlhook.dll
  17. %programfilesdir% \ Retina-XStudios \ AceSpy \ SMTPHook.dll
  18. StealthAPIs.dll
  19. %programfilesdir% \ Retina-XStudios \ AceSpy \ systune.exe
  20. unins000.dat
  21. unins000.exe
  22. %programfilesdir% \ Retina-XStudios \ AceSpy \ urlfname.ndx
  23. userlist.ndx
  24. %programfilesdir% \ Retina-XStudios \ AceSpy \ winlist.ndx
  25. %programfilesdir% \ Retina-XStudios \ AceSpy \ LOGS \ acecache \ _ace11282005.log
  26. _event11282005.log
  27. %commonprogramsdir% \ AceSpy \ AceSpy.lnk
  28. HelpDocumentation.lnk
  29. LicenseAgreement.lnk
  30. %commonprogramsdir% \ AceSpy \ RemoveAceSpy.lnk
  31. VisitAceSpy.lnk
  32. __acelog.ndx
  33. %systemdir% \ AceSpy \ ANSMTP.dll
  34. Asycfilt.dll
  35. %systemdir% \ AceSpy \ Comcat.dll
  36. %systemdir% \ AceSpy \ Comdlg32.ocx
  37. ijl11.dll
  38. %systemdir% \ AceSpy \ KTKbdHk.dll
  39. Makecab.exe
  40. Mscomct2.ocx
  41. %systemdir% \ AceSpy \ Mscomctl.ocx
  42. Msinet.ocx
  43. %systemdir% \ AceSpy \ Msmapi32.ocx
  44. %systemdir% \ AceSpy \ Mswinsck.ocx
  45. Riched32.dll
  46. %systemdir% \ AceSpy \ Richtx32.ocx
  47. %systemdir% \ AceSpy \ Shlwapi.dll
  48. Sysinfo.ocx
  49. %systemdir% \ AceSpy \ systune.exe
  50. Tabctl32.ocx
  51. Wininet.dll
  52. %systemdir% \ ace16win.dll
  53. acespy21.exe
  54. \ acespy331t.exe

Remove these registry keys: 
  1. HKEY_CLASSES_ROOT \ \ SHELLHOOK.CSHELLHOOK
  2. {84480A87-0AE5-11D5-AF6E-008048E23503}
  3. HKEY_CLASSES_ROOT \ INTERFACE \ {84480A86-0AE5-11D5-AF6E-008048E23503}
  4. {84480A89-0AE5-11D5-AF6E-008048E23503}
  5. {84480A8A-0AE5-11D5-AF6E-008048E23503}
  6. HKEY_CURRENT_USER \ SOFTWARE \ VNSI4HSOFTWARES
  7. STEALTHAPIS
  8. SYSTUNE
  9. HKEY_LOCAL_MACHINE \ SOFTWARE \ RXS
  10. SHELLHOOK.CSHELLHOOK
  11. HKEY_LOCAL_MACHINE \ SOFTWARE \ CLASSES \ CLSID \ {84480A87-0AE5-11D5-AF6E-008048E23503}
  12. HKEY_LOCAL_MACHINE \ SOFTWARE \ CLASSES \ INTERFACE \ {84480A86-0AE5-11D5-AF6E-008048E23503}
  13. {84480A89-0AE5-11D5-AF6E-008048E23503}
  14. HKEY_LOCAL_MACHINE \ SOFTWARE \ CLASSES \ TYPELIB \ {84480A8A-0AE5-11D5-AF6E-008048E23503}

Remove these registry key values: 
  1. regsvc
  2. regsvc
  3. HKEY_LOCAL_MACHINE \ SOFTWARE \ MICROSOFT \ WINDOWS \ CURRENTVERSION \ RUN \ systune

Home  |  Spyware  |  Sitemap  |  Contact Us  |  Need Help  |  Links  |  Web  |  Tela Links  |  Site Links

Copyright © 2004-2006 PCPrivacySolutions.com - All rights reserved.

We do not endorse any of the companies, products, or services mentioned on this website. Each product or
service is the trademark of their respective company and all information is provided as opinions only.