SpyBuddy
How can a reputable program, one that earns positive reviews from technical experts, be a danger to your computer? Keylogging programs like SpyBuddy present a double-edged sword to the computer world: they are extremely valuable tools for parents, employers, families, and even law enforcement. But they can also be turned loose without permission for less altruistic purposes.
What is SpyBuddy?
SpyBuddy is a legitimate, legal, and well-regarded keylogging program developed by ExploreAnywhere software and available through their official website, as well as by CNET and other reputable tech sites. Like all legal keyloggers, the purpose of SpyBuddy is to monitor and record activity on a given computer or computers. One of the most common applications is as a parental monitoring tool. In an age of unprecedented access, our children can reach any corner of the world. And by extension, the world can reach right back. Predatory behavior is, unfortunately, not uncommon, and parents have a difficult job of keeping their children safe. SpyBuddy can help. It offers the following features:
- Records program activity.
- Blocks specific programs or websites.
- Provides screenshots.
- Records both sides of chats and IMs.
- Blocks chats.
- Logs keystrokes.
- Tracks downloads and other internet activities.
- Tracks online searches.
- Detects pre-selected keywords (you can create a watch-list and be alerted if your child, employee, etc., are using that word in chat, searches, and more).
SpyBuddy has earned recognition from CNET, ConsumerGuide, and even law enforcement officials who use the program for investigations. The positive and legitimate uses are many, and so, unfortunately, are the opportunities for misusing SpyBuddy.
How Does SpyBuddy Access a System?
Most commonly, SpyBuddy is downloaded by concerned parents, employers, law enforcement officials, or others with legitimate intentions. It is also used by less scrupulous people to gather sensitive data. In either case, the program must be manually installed in the computer. SpyBuddy does not support remote installation, so the installer must have direct access to your computer. He needs only about four minutes to install the program, and after that, he can monitor activity from any computer.
To help prevent a keylogger like SpyBuddy from being installed, it is a good idea not to share computers and to make sure your system is password-protected. If you have to use shared computers, such as at work, school, or a library, do not engage in activities, like shopping, banking, or bill paying that require you to enter sensitive information.
What Danger Does SpyBuddy Pose?
It is important to reiterate that SpyBuddy is a legal program, and it does have very helpful applications. That being said, the sophisticated keylogging features and ability to run with stealth presents a severe risk when it is installed without your permission. In order to run unseen, SpyBuddy must reconfigure your security settings. This can leave your system open to infiltration by other forms of malware or cause general instability. In general, though, technical risks are not considered as severe as the risk to your personal and financial information.
Those monitoring your computer with SpyBuddy may easily obtain user names, passwords, bank account and credit card information, addresses, phone numbers, and other data that is best left private.
Is SpyBuddy In Your System?
SpyBuddy is designed to evade detection. During installation, one has the option of rendering it invisible, which makes it far more effective. It is not visible in system registries, program lists, task managers, or by third-party programs, such as your security program. While many security programs can now recognize keyloggers, SpyBuddy and other top programs continually update themselves to remain hidden. This is their most important selling point, but it makes it very difficult to determine if your computer is affected.
Your computer may be running more slowly than usual, and you may notice that your online accounts have been accessed. Many people only begin to suspect the presence of a keylogger with subtle clues like these. If you think someone has installed such a program, it is best to confirm it immediately and then take steps to remove SpyBuddy.
How Do You Remove an Invisible Program like SpyBuddy?
You could ask your leading suspect if he put SpyBuddy on your computer, but you are not likely to get a straight answer. Instead, rely on a specially designed program like XoftSpySE Anti-Spyware
. This is not a standard security program; it can detect even hidden traces of programs like SpyBuddy and take steps to remove them quickly, easily, and with no damage to your system. This is by far the most reliable and safe method of removing SpyBuddy.
Manual removal is also possible, but this is risky unless you have extensive technical experience. All files must be removed so the program cannot repair itself. But they have to be removed without inadvertently deleting a necessary file, which can be tricky. This is a tedious job that holds potential risk for your system. If you have experience, try the following to remove SpyBuddy:
Kill Processes:
sb32mon.exe
exitstealth.exe
Delete Registry Values:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRuncdloader
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunregupdate
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunscancheck32
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunscansys32
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunsystemcheck
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunsystem32
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRuntrunk32
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunwinsyscheck
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemDisableTaskMgr=1
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonIgnoreShiftOveride=0x1
HKEY_LOCAL_MACHINESOFTWARE\ExploreAnywhere Software\SpyBuddy
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstall\SpyBuddy [XVS]*
*XVS is the version number or name
Delete Files:
sb32mon.exe
exitstealth.exe
install-drivers.dll
sbsysdll.dll
sb32mon.dll
sysicept.dll
winsscap.dll
win32sb.dll
Delete Directory:
C:Program Files\ExploreAnywhere\SpyBuddy
Remove SpyBuddy Automatically/Safely
Recommended tools for removing SpyBuddy. Choose the best solution for you:
- XoftSpySE Anti-Spyware 7.0 - a safe and reliable method to remove SpyBuddy.
- Spyware Doctor 2010 - an award-winning and very capable antispyware program.
- STOPzilla 5.0 - an excellent performer with great technical support.
These antispyware products are constantly being updated to detect and remove new variants of Trojans and malware. XoftSpySE's database was last updated on September 1st, 2010. Make sure your system is up-to-date, check for Windows security updates.
If you require personal assistance removing SpyBuddy even after using one of the recommended tools, email us at info@removeadware.com.au for help. Describe the problem and attach a recent XoftSpySE log file to save us a bit of time.
This webpage was created to provide information on SpyBuddy removal. We do not own or endorse SpyBuddy.