|
What is FireSpy and removal instructions
FireSpy, also known as Snifula, is a trojan that monitors user Internet activity, tracks browsing habits, and records information the user enters on various web sites. The parasite transfers stolen data to predetermined remote hosts. FireSpy affects Mozilla Firefox and works as its extension. It runs every time the user launches the web browser.
FireSpy manual removal: Kill processes: 138762763.exe
Delete registry values: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\stup
HKEY_CURRENT_USER\Keys\k1
HKEY_CURRENT_USER\Keys\k2
Delete files: 138762763.exe, appinterconn.dll, appinterconn.xpt
Delete directories: C:\Documents and Settings\[Current User]\Application Data\Mozilla\Firefox\Profiles\[X].defaults\extensions\(1d58a41c-b1a5-4c8f-94bf-6350f2809b06) Misc: [X] is a combination of random characters.
Exact file location:
138762763.exe - C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32
appinterconn.dll, appinterconn.xpt - C:\Program Files\Mozilla Firefox\Components
|
|
|
|
|