Click on screenshot to zoom
Danger level 7
Type: Trojans

Other mutations known as:
Trojan.Spyeye.gen!A

Trojan.Spyeye

Trojan.Spyeye belongs to the Trojan category of computer threats and it enters the system with intention to steal information. It is the name for a family of Trojans, and other detections from the same nest of parasites can include such titles as Trojan.Spyeye.gen!A and the like. It is rather hard to determine the exact moment when or how one can get infected with Trojan.Spyeye. Therefore it is recommended to perform regular system check ups with a reliable malware scanner.

Trojans enter systems with pretense of being useful programs. Trojan.Spyeye might be lurking in various spaces of the Internet, because there are many methods of distribution for this kind of malware. For example, a user must be very careful about a load of spam email in his mailbox, because that is one of the ways for a Trojan to spread itself. The spam email message might contain an attachment with the Trojan installer file, or there might be a link in the mail text itself, urging the user to click on it and see an exciting video or donate a small amount of money for a good cause. The creators of Trojan.Spyeye are just that adept at luring unsuspecting users into their traps.

When this Trojan is installed, the user might not notice any immediate changes to the system, but the problem is that Trojan.Spyeye, can record and store important information, such as live chat logs, banking passwords and so on. It captures the keystrokes being made by the user and then steals usernames and passwords using a method known as “form grabbing”. The Trojan can allow a hacker to access the infected computer via the Internet, or send out the stored data over the network to a third party. So it is obvious that this parasite is dangerous and should be definitely looked out for.

There is also a list of processes associated with Trojan.Spyeye, and if one finds these processes in the Windows Task Manager, it can be the first indication that the computer has been seriously compromised. For example, kolesomini.exe and Cleansweep.exe are classified as Trojan processes which start once the system boots up. Also, such processes as bootstartx.exe and CIAxxxxxxx.exe are associated with cloaked malware, which means that they resist interrogation by security tools and uses rootkit techniques to conceal their presence in the system. It shows that Trojan.Spyeye tries to stay in an infected computer for a longer period of time, without being detected by an antivirus program.

The most important thing is to keep the computer security program up to date, and have a few reliable malware detector tools installed, because one product might not be enough to protect the system from various types of malware. Since the Trojan in question is very good at hiding from security programs, it is an absolutely must to delete Trojan.Spyeye once it is detected without further ado. Getting rid of this pest might be very hard to perform manually, so it is recommended to acquire a reliable malware removal tool, which would take care of the infection and then secure the computer against any future attacks.

Download Spyware Removal Tool to Remove* Trojan.Spyeye
  • Quick & tested solution for Trojan.Spyeye removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Trojan.Spyeye

Files associated with Trojan.Spyeye infection:

der2589244.dll
AcroIEHelpe148.dll
winz2.exe
service.exe
byjqtm.exe
_ex-68.exe
gb.exe
F2D.exe
ntuser32.exe
task.exe
jucheck.exe
rundll32.exe
dosxa.exe
WinAvs.exe
systemntfy.exe
SynNglp.exe
spoolsvr32.exe
ha_server.exe
AcroIEHelpe068.dll
winntR2.exe
temp01.exe
ClamAVFile
windowseep.exe
questscan146.exe
pciyen.exe
183explorer.exe
cnsm.dll
AcroIEHelpe017.dll
JiurlPortHide.sys
loadnet.exe
frenjrupf6.dll
196126968.exe
shdoflash.dll
qhcohvh.dll
binternet.exe
nspr01.dll
lop32.dll
klif64.dll
facju1.dll
Xvid-Setup-dm-9.exe
questdns.dll
Skype.exe
M3SLSRCH.EXE
gabpath.exe
cssrs.exe
CEC_MAIN.exe
CBA.sys
AcrobatIEReader.dll
manleuk.exe
zyndld32080926jt.dll
Msnmsgr.exe
wmupdater.exe
updater.exe
tikuj.exe
suvokoobe.exe
pebehohas.exe
korabecap.exe
igfxsc32.exe
fousiw.exe
RegClean.exe
repsvc.exe
services.exe
msn64.exe
csrss.exe
fuwarxyus.dll
10.exe
Explorer.exe
Bot.exe
acxWILite.dll
eapAuthenticationClock.dll
apc_host.exe
psysnew.exe
svchosts.exe
kb845325.exe
ixi1of3vu8ivw.exe
_ex-08.exe
WebCheck.dll
US30XP.sys
update.exe
umdmgr.exe
tabany.exe
StartService.exe
siskxn32.exe
rqppqp.dll
jdkelj.exe
gotnewupdate000.exe
GoogleUpdate.exe
games.exe
eoo1.exe
6038710071.exe
5a38cf68.exe
59522793.exe
31979.exe
1D.tmp
041.exe
wvmu.exe
CUedca.exe
reset5c.dll
userinit.exe
termsrv.dll
msiead32.dll
drwaec32.dll
defrsmgr.dll
caclsn32.dll
xi27817.dll
winmsne.exe
shdocwv.dll
MsTecs.exe
MsgrUpd.exe
lsass.exe
atualizada.sys
yfrfx.dll
xw46792.dll
xln.cpl
wins.exe
winmsnliv.exe
winbudump.exe
winauxp.exe
vdr.dll
usbdata10.sys
updates.exe
upd32.exe
svrwsc.exe
spuninst.exe
SM336_2209.exe
skypexxxxx.exe
shell.exe
server.exe
oi41636.dll
oa93135.dll
nvsvc32.exe
msftldr.dll
mont.exe
men.dll
mahdtml.dll
ltzqai.exe
kroover.exe
krambst.dll
JSInjector.dll
hbaapiwow.exe
gi22393.dll
geurge.exe
fx10619.dll
flipopia.exe
flashapi.exe
dfrgsnapnt.exe
devconus.dll
cfdrive32.exe
btw_oko.dll
andy142.exe
6to4v32.dll
cb10196.dll
winxpqohb.exe
thris.exe
svchost.exe
setup.exe
xhostl.cpl
sppupdsvc.exe
GoogleUpdateBeta.exe
yahoosetul.exe
wlcwlcwlcw.exe
windowsdvd.exe
vmgrfpexxx.exe
usxxxxxxxx.exe
ugsoacgsco.exe
systam.exe
swidjuwadj.exe
ssdasdsdfc.exe
sleepxxxxx.exe
protestasx.exe
programxxx.exe
procmainxx.exe
portwcxcxe.exe
poihshhshs.exe
msixxxxxxx.exe
malacuxatx.exe
kolesomini.exe
jdsfjsdijf.exe
iuoidiosri.exe
iTunesinst.exe
iexplrerxx.exe
ieksplorer.exe
horhorhorh.exe
googlemaps.exe
fheydbueyj.exe
extensions.exe
explorrxxx.exe
erppdfwdfg.exe
driverswyn.exe
cyberfoxxx.exe
cxlacuxatx.exe
cleenprogx.exe
cleanswepx.exe
cleanitxxx.exe
CIAxxxxxxx.exe
bootstartx.exe
blockentxx.exe
asdkasdakl.exe
asdfjnkads.exe
akhdfiusdf.exe
ajndufhiad.exe
$Recycle$.exe
cleansweep.exe

Trojan.Spyeye DLL's to remove:

der2589244.dll
AcroIEHelpe148.dll
AcroIEHelpe068.dll
cnsm.dll
AcroIEHelpe017.dll
frenjrupf6.dll
shdoflash.dll
qhcohvh.dll
nspr01.dll
lop32.dll
klif64.dll
facju1.dll
questdns.dll
AcrobatIEReader.dll
zyndld32080926jt.dll
fuwarxyus.dll
acxWILite.dll
eapAuthenticationClock.dll
WebCheck.dll
rqppqp.dll
reset5c.dll
termsrv.dll
msiead32.dll
drwaec32.dll
defrsmgr.dll
caclsn32.dll
xi27817.dll
shdocwv.dll
yfrfx.dll
xw46792.dll
vdr.dll
oi41636.dll
oa93135.dll
msftldr.dll
men.dll
mahdtml.dll
krambst.dll
JSInjector.dll
gi22393.dll
fx10619.dll
devconus.dll
btw_oko.dll
6to4v32.dll
cb10196.dll

Trojan.Spyeye processes to kill:

winz2.exe
service.exe
byjqtm.exe
_ex-68.exe
gb.exe
F2D.exe
ntuser32.exe
task.exe
jucheck.exe
rundll32.exe
dosxa.exe
WinAvs.exe
systemntfy.exe
SynNglp.exe
spoolsvr32.exe
ha_server.exe
winntR2.exe
temp01.exe
windowseep.exe
questscan146.exe
pciyen.exe
183explorer.exe
loadnet.exe
196126968.exe
binternet.exe
Xvid-Setup-dm-9.exe
Skype.exe
gabpath.exe
cssrs.exe
CEC_MAIN.exe
manleuk.exe
Msnmsgr.exe
wmupdater.exe
updater.exe
tikuj.exe
suvokoobe.exe
pebehohas.exe
korabecap.exe
igfxsc32.exe
fousiw.exe
RegClean.exe
repsvc.exe
services.exe
msn64.exe
csrss.exe
10.exe
Explorer.exe
Bot.exe
apc_host.exe
psysnew.exe
svchosts.exe
kb845325.exe
ixi1of3vu8ivw.exe
_ex-08.exe
update.exe
umdmgr.exe
tabany.exe
StartService.exe
siskxn32.exe
jdkelj.exe
gotnewupdate000.exe
GoogleUpdate.exe
games.exe
eoo1.exe
6038710071.exe
5a38cf68.exe
59522793.exe
31979.exe
041.exe
wvmu.exe
CUedca.exe
userinit.exe
winmsne.exe
MsTecs.exe
MsgrUpd.exe
lsass.exe
wins.exe
winmsnliv.exe
winbudump.exe
winauxp.exe
updates.exe
upd32.exe
svrwsc.exe
spuninst.exe
SM336_2209.exe
skypexxxxx.exe
shell.exe
server.exe
nvsvc32.exe
mont.exe
ltzqai.exe
kroover.exe
hbaapiwow.exe
geurge.exe
flipopia.exe
flashapi.exe
dfrgsnapnt.exe
cfdrive32.exe
andy142.exe
winxpqohb.exe
thris.exe
svchost.exe
setup.exe
sppupdsvc.exe
GoogleUpdateBeta.exe
yahoosetul.exe
wlcwlcwlcw.exe
windowsdvd.exe
vmgrfpexxx.exe
usxxxxxxxx.exe
usxxxxxxxx.exe
usxxxxxxxx.exe
ugsoacgsco.exe
systam.exe
swidjuwadj.exe
ssdasdsdfc.exe
sleepxxxxx.exe
protestasx.exe
protestasx.exe
programxxx.exe
procmainxx.exe
portwcxcxe.exe
poihshhshs.exe
poihshhshs.exe
msixxxxxxx.exe
malacuxatx.exe
kolesomini.exe
jdsfjsdijf.exe
iuoidiosri.exe
iuoidiosri.exe
iuoidiosri.exe
iTunesinst.exe
iexplrerxx.exe
ieksplorer.exe
horhorhorh.exe
googlemaps.exe
fheydbueyj.exe
extensions.exe
explorrxxx.exe
erppdfwdfg.exe
driverswyn.exe
cyberfoxxx.exe
cxlacuxatx.exe
cleenprogx.exe
cleanswepx.exe
cleanswepx.exe
cleanswepx.exe
cleansweep.exe
cleansweep.exe
cleansweep.exe
cleansweep.exe
cleansweep.exe
cleansweep.exe
cleansweep.exe
cleansweep.exe
cleansweep.exe
cleansweep.exe
cleansweep.exe
cleansweep.exe
cleansweep.exe
cleansweep.exe
cleansweep.exe
cleansweep.exe
cleansweep.exe
cleansweep.exe
cleanitxxx.exe
CIAxxxxxxx.exe
bootstartx.exe
bootstartx.exe
bootstartx.exe
blockentxx.exe
asdkasdakl.exe
asdfjnkads.exe
akhdfiusdf.exe
ajndufhiad.exe
$Recycle$.exe
cleansweep.exe
Disclaimer

Comments

  1. 3D300 May 25, 2021

    I had once such thing in my pc.it road along holding on my browser.
    Now i think is it possible that a mobile can have it.i call it like a whale with a fish on it.

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.