Remove Raidys

Raidys Description

This is a trojan that steals valuable user information, logs keystrokes and gives the attacker remote unauthorized access to a compromised PC. Raidys overwrites critical computer files with its copies and modifies the registry, so it could be started on every Windows startup. It places infected files into C:WindowsSystem, C:WindowsSystem32 or C:WinntSystem32 directories. It also uses special technique to hide its active processes and prevent Windows OS and some firewall applications from detecting the threat. Raidys monitors user activity in the Internet and records any data that the user enters into password or login forms on many web sites. It sends gathered data to a malicious server in the Internet. Raidys is very difficult to detect, so consider using advanced anti-malware and antivirus software.

Remove Raidys

Stop the following Raidys processes:
userinit.exe
ctfmon.exe

Remove the following Raidys registry keys:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunctfmon.exe=%system%ctfmon.exe
HKEY_LOCAL_MACHINESOFTWAREvr=ok

Unregister the following Raidys DLL files:
win_rar.dll
sfc_os.dll

Delete the following Raidys files:
userinit.exe
ctfmon.exe
raid.sys
win_rar.dll
sfc_os.dll
twain.ini

Other Spyware

0-9