Remove NETObserve

NETObserve Description

NETObserve is a powerful remote administration tool with a rich set of functions. NETObserve is a legitimate and quite popular product. It can be used to remotely control the affected PC, browse its file computer, manage its files and processes, modify essential computer and networking settings. The application also tracks user and computer activity, logs all keystrokes, takes screenshots, captures pictures from a webcam, records online chat conversations and addresses of visited web sites. NETObserve is controlled through the web interface. The RAT can hide its running processes and use different techniques to avoid detection. The threat runs on every Windows startup.

Remove NETObserve

Stop the following NETObserve processes:
broadcast.exe
no32mon.exe

Remove the following NETObserve registry keys:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun1sys32cfg
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls%Windir%unvise32.exe
HKEY_LOCAL_MACHINESOFTWAREExploreAnywhereSoftwareNOuy_url=[siteaddress]
HKEY_LOCAL_MACHINESOFTWAREExploreAnywhereSoftwareNOsite_url=[siteaddress]
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallNETObserve[XVS]

Unregister the following NETObserve DLL files:
easys.dll
nosys32.dll
syscap32.dll

Delete the following NETObserve files:
broadcast.exe
no32mon.exe
easys.dll
nosys32.dll
syscap32.dll

Other Spyware

0-9