Please make sure you know what you are doing before performing any of the instructions on this site. You maybe better off downloading a proven spyware scanner and let the program do the cleaning. You may need anti-virus software as well and please allow up to 10 hours to get your system back on its feet again. Please feel free to ask questions, tell us the problem and we will help for FREE.
Downloader | Keylogger | RAT |
Trojan |
Adware
Worm |
Sniffer |
Spoofer |
Toolbar |
Virus |
Probe
If you have a certain web site that keeps popping up please feel free in contact us at spyware at itconsultancy.org
DOWNLOAD EMPLOYEE WATCHER SPYWARE REMOVAL SOFTWARE
These products will remove and protect you from adware, spyware, trojans etc...
Removal instructions for employee watcher:
Alias:
Unknown
Protect yourself from spyware and virus attacks PDF
Notes:
The uninstaller requires a password to work.
Stop processes:svchost.exe, smss.exe, initializer.exe, csrss.exe, csrss.ex
Remove Registry values:
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunWinUpdateProtection
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunWinUpdateProtection
HKEY_CLASSES_ROOTANSMTP.OBJ
HKEY_CLASSES_ROOTANSMTP.OBJ.1
HKEY_CLASSES_ROOTaxsCaptureScrn.axsCapScreen
HKEY_CLASSES_ROOTdwshk36.HookPage
HKEY_CLASSES_ROOTdwshk36.HookPage.1
HKEY_CLASSES_ROOTdwshk36.KeyList
HKEY_CLASSES_ROOTdwshk36.KeyList.1
HKEY_CLASSES_ROOTdwshk36.KeyPage
HKEY_CLASSES_ROOTdwshk36.KeyPage.1
HKEY_CLASSES_ROOTdwshk36.MsgList
HKEY_CLASSES_ROOTdwshk36.MsgList.1
HKEY_CLASSES_ROOTdwshk36.RegMsg
HKEY_CLASSES_ROOTdwshk36.RegMsg.1
HKEY_CLASSES_ROOTdwshk36.WinHook
HKEY_CLASSES_ROOTdwshk36.WinHook.6
HKEY_CLASSES_ROOTInetCtls.Inet
HKEY_CLASSES_ROOTInetCtls.Inet.1
HKEY_CLASSES_ROOTMabry.PingX
HKEY_CLASSES_ROOTMabry.PingX.1
HKEY_CLASSES_ROOTMabry.PingXCom
HKEY_CLASSES_ROOTMabry.PingXCom.1
HKEY_CLASSES_ROOTMabry.CPingXPropPage
HKEY_CLASSES_ROOTMabry.CPingXPropPage.1
HKEY_CLASSES_ROOTCLSID{0468C950-83E2-11D3-BE51-00C0DFC2E32C}
HKEY_CLASSES_ROOTCLSID{22B4C8F5-A686-42CC-8224-E4817445109F}
HKEY_CLASSES_ROOTCLSID{253664FB-EDFC-4AC6-BD69-B322F466AEED}
HKEY_CLASSES_ROOTCLSID{2C704DBB-9C46-11D1-B784-00001C1AD1F8}
HKEY_CLASSES_ROOTCLSID{389B19B9-9A87-11D1-B77F-00001C1AD1F8}
HKEY_CLASSES_ROOTCLSID{3B7C8860-D78F-101B-B9B5-04021C009402}
HKEY_CLASSES_ROOTCLSID{48E59293-9880-11CF-9754-00AA00C00908}
HKEY_CLASSES_ROOTCLSID{48E59294-9880-11CF-9754-00AA00C00908}
HKEY_CLASSES_ROOTCLSID{48E59295-9880-11CF-9754-00AA00C00908}
HKEY_CLASSES_ROOTCLSID{6E29B981-9C50-11D1-B784-00001C1AD1F8}
HKEY_CLASSES_ROOTCLSID{6E29B982-9C50-11D1-B784-00001C1AD1F8}
HKEY_CLASSES_ROOTCLSID{78E5A540-1850-11CF-9D53-00AA003C9CB6}
HKEY_CLASSES_ROOTCLSID{855C49A7-9C3C-11D1-B784-00001C1AD1F8}
HKEY_CLASSES_ROOTCLSID{8B8BB3A2-8576-11D3-BE51-00C0DFC2E32C}
HKEY_CLASSES_ROOTCLSID{AFC634B0-4B8B-11CF-8989-00AA00688B10}
HKEY_CLASSES_ROOTCLSID{DE5C2449-65D5-4413-BFCF-6BFCDF294665}
HKEY_CLASSES_ROOTInterface{0468C94F-83E2-11D3-BE51-00C0DFC2E32C}
HKEY_CLASSES_ROOTInterface{0468C951-83E2-11D3-BE51-00C0DFC2E32C}
HKEY_CLASSES_ROOTInterface{389B19B7-9A87-11D1-B77F-00001C1AD1F8}
HKEY_CLASSES_ROOTInterface{3B7C8862-D78F-101B-B9B5-04021C009402}
HKEY_CLASSES_ROOTInterface{3E3621C0-8635-11D3-BE51-00C0DFC2E32C}
HKEY_CLASSES_ROOTInterface{48E59291-9880-11CF-9754-00AA00C00908}
HKEY_CLASSES_ROOTInterface{48E59292-9880-11CF-9754-00AA00C00908}
HKEY_CLASSES_ROOTInterface{68B8DCDB-EFA4-420A-BB8A-71B9892A2063}
HKEY_CLASSES_ROOTInterface{859321D0-3FD1-11CF-8981-00AA00688B10}
HKEY_CLASSES_ROOTInterface{8B8BB3A1-8576-11D3-BE51-00C0DFC2E32C}
HKEY_CLASSES_ROOTInterface{8B8BB3A3-8576-11D3-BE51-00C0DFC2E32C}
HKEY_CLASSES_ROOTInterface{A5F6C90C-ABE4-4C57-A421-8C5A202AA9F8}
HKEY_CLASSES_ROOTInterface{A834857C-9A90-11D1-B77F-00001C1AD1F8}
HKEY_CLASSES_ROOTInterface{AB14F05E-4C1D-49DC-8BD5-9E6B510B3EBA}
HKEY_CLASSES_ROOTInterface{B78B0E98-0431-4A6B-8C3D-F240FE8725F5}
HKEY_CLASSES_ROOTInterface{D937A3C0-8634-11D3-BE51-00C0DFC2E32C}
HKEY_CLASSES_ROOTInterface{E9A5593C-CAB0-11D1-8C0B-0000F8754DA1}
HKEY_CLASSES_ROOTInterface{ED117630-4090-11CF-8981-00AA00688B10}
HKEY_CLASSES_ROOTInterface{F7C1A3FA-C511-488A-B583-4F153B9368C4}
HKEY_CLASSES_ROOTTypeLib{0468C933-83E2-11D3-BE51-00C0DFC2E32C}
HKEY_CLASSES_ROOTTypeLib{0468C941-83E2-11D3-BE51-00C0DFC2E32C}
HKEY_CLASSES_ROOTTypeLib{0A4AFE1D-F664-11D0-B649-00001C1AD1F8}
HKEY_CLASSES_ROOTTypeLib{1FAA49C4-16B7-4D28-8930-31BE1810D943}
HKEY_CLASSES_ROOTTypeLib{389B19AA-9A87-11D1-B77F-00001C1AD1F8}
HKEY_CLASSES_ROOTTypeLib{3B7C8863-D78F-101B-B9B5-04021C009402}
HKEY_CLASSES_ROOTTypeLib{48E59290-9880-11CF-9754-00AA00C00908}
HKEY_CLASSES_ROOTTypeLib{DE6317F7-6EF0-45C2-88D1-8E09415817F1}
Remove files:svchost.exe, smss.exe, initializer.exe, csrss.exe, csrss.ex, employee watcher [XVS] uninstaller.exe, uninstaller.exe
Remove directories:C:windowsupdate
Additional:[XVS] is the version number.Some listed registry entries can be used by installed legitimate . Employee Watcher:
All topics related to Employee Watcher spyware or virus on your computer and how to remove Employee Watcher or fix it.