WinRecon Removal Guide

WinRecon Description

WinRecon is a commercial keylogger that tracks user Internet activity, logs all keystrokes, takes screenshots and records passwords. It saves gathered data into encrypted file or sends it out to a predefined e-mail address. WinRecon must be manually installed.

WinRecon Automatic Detection (Recommended)

Is your PC infected with WinRecon? To safely & quickly detect WinRecon, we highly recommend you...

Download SpyHunter's* Malware Scanner.

WinRecon Manual Removal Instructions

Backup Reminder: Always be sure to back up your PC before making any changes.

Step 1 : Use Windows Task Manager to Remove WinRecon Processes

Remove the "WinRecon" processes files:

Read more on How to kill WinRecon Processes

Step 2 : Use Registry Editor to Remove WinRecon Registry Values

Locate and delete "WinRecon" registry entries:

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallWinRecon
BDC217C8-ED16-11CD-956C-0000C04E4C0A
F2DDA1D5-C5A2-4149-9D82-3B7ABE4CB411
3B7C8863-D78F-101B-B9B5-04021C009402
1CA5F9A1-DA0A-4C31-8C7F-81B497EAD912
ED117630-4090-11CF-8981-00AA00688B10
E9A5593C-CAB0-11D1-8C0B-0000F8754DA1
E3DE1EFF-67BA-4317-89D7-BB60FC26E414
D0E090C1-F267-4152-B718-EFB01B139522
859321D0-3FD1-11CF-8981-00AA00688B10
4008A442-D2E8-4A64-8BBA-F145CA9D60C9
3B7C8862-D78F-101B-B9B5-04021C009402
09D14D02-1C28-4EA5-9D34-101E6A1C688F
F3065315-1D2C-4992-8F24-57FEF0E1DCB5
B617B991-A767-4F05-99BA-AC6FCABB102E
AFC634B0-4B8B-11CF-8989-00AA00688B10
78E5A540-1850-11CF-9D53-00AA003C9CB6
3EDF892D-D60F-4E94-83BC-A93BC4C91D1D
3B7C8860-D78F-101B-B9B5-04021C009402
HKEY_LOCAL_MACHINESOFTWAREClasseskpview1.kpview
HKEY_LOCAL_MACHINESOFTWAREClasseskpsc.kpscEnc
HKEY_LOCAL_MACHINESOFTWAREGenteePathsWinRecon[XVS]
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionUninstallWinReconHKEY_LOCAL_MACHINESOFTWAREArboc
HKEY_LOCAL_MACHINE SOFTWAREClassesInterface{2334D2B3-713E-11CF-8AE5-00AA00C00905}TypeLib(Default)={BDC217C8-ED16-11CD-956C-0000C04E4C0A} 
HKEY_LOCAL_MACHINE SOFTWAREClassesInterface{2334D2B1-713E-11CF-8AE5-00AA00C00905}TypeLib(Default)={BDC217C8-ED16-11CD-956C-0000C04E4C0A} 
HKEY_LOCAL_MACHINE SOFTWAREClassesTypeLib{F2DDA1D5-C5A2-4149-9D82-3B7ABE4CB411} 
HKEY_LOCAL_MACHINE SOFTWAREClassesTypeLib{3B7C8863-D78F-101B-B9B5-04021C009402} 
HKEY_LOCAL_MACHINE SOFTWAREClassesTypeLib{1CA5F9A1-DA0A-4C31-8C7F-81B497EAD912} 
HKEY_LOCAL_MACHINE SOFTWAREClassesInterface{ED117630-4090-11CF-8981-00AA00688B10} 
HKEY_LOCAL_MACHINE SOFTWAREClassesInterface{E9A5593C-CAB0-11D1-8C0B-0000F8754DA1} 
HKEY_LOCAL_MACHINE SOFTWAREClassesInterface{E3DE1EFF-67BA-4317-89D7-BB60FC26E414} 
HKEY_LOCAL_MACHINE SOFTWAREClassesInterface{D0E090C1-F267-4152-B718-EFB01B139522} 
HKEY_LOCAL_MACHINE SOFTWAREClassesInterface{859321D0-3FD1-11CF-8981-00AA00688B10} 
HKEY_LOCAL_MACHINE SOFTWAREClassesInterface{4008A442-D2E8-4A64-8BBA-F145CA9D60C9} 
HKEY_LOCAL_MACHINE SOFTWAREClassesInterface{3B7C8862-D78F-101B-B9B5-04021C009402} 
HKEY_LOCAL_MACHINE SOFTWAREClassesInterface{09D14D02-1C28-4EA5-9D34-101E6A1C688F} 
HKEY_LOCAL_MACHINE SOFTWAREClassesCLSID{F3065315-1D2C-4992-8F24-57FEF0E1DCB5} 
HKEY_LOCAL_MACHINE SOFTWAREClassesCLSID{B617B991-A767-4F05-99BA-AC6FCABB102E} 
HKEY_LOCAL_MACHINE SOFTWAREClassesCLSID{AFC634B0-4B8B-11CF-8989-00AA00688B10} 
HKEY_LOCAL_MACHINE SOFTWAREClassesCLSID{78E5A540-1850-11CF-9D53-00AA003C9CB6} 
HKEY_LOCAL_MACHINE SOFTWAREClassesCLSID{3EDF892D-D60F-4E94-83BC-A93BC4C91D1D} 
HKEY_LOCAL_MACHINE SOFTWAREClassesCLSID{3B7C8860-D78F-101B-B9B5-04021C009402} 
HKEY_LOCAL_MACHINE SOFTWAREClasseskpview1.kpview 
HKEY_LOCAL_MACHINE SOFTWAREClasseskpsc.kpscEnc 
HKEY_LOCAL_MACHINE SOFTWAREGenteePathsWinRecon [XVS] 
HKEY_LOCAL_MACHINE SOFTWAREArboc

Step 3 : Use Windows Command Prompt to Unregister WinRecon DLL Files

Search and unregister "WinRecon" DLL files:

Read more on How to Remove WinRecon DLL Files

Step 4 : Detect and Delete Other WinRecon Files

Remove the "WinRecon" processes files:

Read more on How to Delete Harmful Files

Site Disclaimer

Publication Date: Tue Mar 28 2006 12:19:23 EDT

User Comments

There are no comments posted for this page.

RECOMMENDED

Top Parasite Threats

Recent Parasite Threats

Resources and Tools

Recent Articles

Subscribe To