cant completely erase a keylogger

hi guys a few months back i accidently downloaded a keylogger from Evision Megapro. I've since completely erased it with the various anti-virus/adware softwares i've got. However, every now and then when i start certain applications up i get the windows message - comlib.

Windows Security 292 This topic was started by ,



data/avatar/default/avatar34.webp

4 Posts
Location -
Joined 2004-11-29
hi guys
 
a few months back i accidently downloaded a keylogger from Evision Megapro.
 
I've since completely erased it with the various anti-virus/adware softwares i've got.
 
However, every now and then when i start certain applications up i get the windows message - "comlib.dll was not found. failed to load this application. please re-install" or something most similar to that. The applications i want to use then continue to load up fine. it's just this irritating message i get all the time.
 
As i say, comlib.dll is related to the keylogger from EVision Mega pro, which i deleted.
 
But presumably there's still registery entries that are still there relating to this. I've followed all instruction from this site to remove them - http://www.pestpatrol.com/PestInfo/e/evision_megapro.asp but none of the entries it listed were in the registry.
 
Any idea how to finally get rid of it? how i can find these rogue reg entries so i can erase them? know of any free s/w i can download to help me out?
 
cheers guys

Participate on our website and join the conversation

You have already an account on our website? Use the link below to login.
Login
Create a new user account. Registration is free and takes only a few seconds.
Register
This topic is archived. New comments cannot be posted and votes cannot be cast.

Responses to this topic



data/avatar/default/avatar01.webp

1547 Posts
Location -
Joined 2002-05-29
Did you search for any reg entries with comlib.dll in them ?!?
 
You maybe right in believing some leftover entries are still in there.
 
Also check here in this location to see if something is still running from this malware.
 
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
 
There will most likely be some other normal apps getting started this way, for instance NAV starts from here


data/avatar/default/avatar34.webp

4 Posts
Location -
Joined 2004-11-29
OP
yes, done a reg search but found nothing, yet im still getting messages.
 
i'll look where you suggest tonight when i get home. cheers.
 
i'll report back