How to remove eBlaster


What this program does:

eBlaster records emails, chats, instant messages, key strokes, and websites visited. It then intermittently sends this information to a remote server.

Tools Needed for this fix:

HijackThis
eblaster.reg

Related Tutorials:

How to use HijackThis to remove Browser Hijackers & Spyware

Symptoms in a HijackThis Log:

O21 - SSODL: XmLdrLocation - {0C887F38-5178-43DA-B9F0-B856141FCDA4} - C:\WINDOWS\System32\nvrcr32.dll

C:\WINDOWS\System32\nvrcr32.dll could be replaced in the above link with the following file name: rmashlex.dll

Instructions:

This program needs to be removed manually as there is no known uninstall entry in the Windows Add/Remove Programs Control Panel. Please follow these instructions to remove this program:
  1. Download the attached registry file, eblaster.reg , and save it to your desktop.

  2. Reboot your computer into Safe Mode.

  3. Double-click on the eblaster.reg that you had saved on your desktop in step 1.

  4. When it prompts if you would like to merge the data into the Registry, click on the Yes button.

  5. Reboot and delete the following files:

    rmashlex.dll
    nvrcr32.dll
    eblaster.exe
    msrac32.exe
    ebsetup.exe
Your computer should now be clean of the eBlaster program.


This is a self-help guide. Use at your own risk.



BleepingComputer.com can not be held responsible for problems that may occur by using this information. If you would like help with any of these fixes, you can post a HijackThis log in our HijackThis Logs and Analysis forum.

If you have any questions about this self-help guide then please post those questions in our AntiVirus, Firewall and Privacy Products and Protection Methods forum and someone will help you.