Help
This forum contains self-help guides on removing common malware and viruses. These guides can be advanced so please use them at your own risk.
What this program does:
eBlaster records emails, chats, instant messages, key strokes, and websites visited. It then intermittently sends this information to a remote server.
Tools Needed for this fix:
HijackThis
eblaster.reg
Related Tutorials:
How to use HijackThis to remove Browser Hijackers & Spyware
Symptoms in a HijackThis Log:
O21 - SSODL: XmLdrLocation - {0C887F38-5178-43DA-B9F0-B856141FCDA4} - C:\WINDOWS\System32\nvrcr32.dll
C:\WINDOWS\System32\nvrcr32.dll could be replaced in the above link with the following file name: rmashlex.dll
Instructions:
This program needs to be removed manually as there is no known uninstall entry in the Windows Add/Remove Programs Control Panel. Please follow these instructions to remove this program:
- Download the attached registry file, eblaster.reg
, and save it to your desktop.
- Reboot your computer into Safe
Mode.
- Double-click on the eblaster.reg that you had saved on your desktop in step
1.
- When it prompts if you would like to merge the data into the Registry, click
on the Yes button.
- Reboot and delete the following files:
rmashlex.dll
nvrcr32.dll
eblaster.exe
msrac32.exe
ebsetup.exe
This is a self-help guide. Use at your own risk.
BleepingComputer.com can not be held responsible for problems that may occur by using this information. If you would like help with any of these fixes, you can post a HijackThis log in our HijackThis Logs and Analysis forum.
If you have any questions about this self-help guide then please post those questions in our AntiVirus, Firewall and Privacy Products and Protection Methods forum and someone will help you.