All in one Keylogger is commercial monitoring software with a danger index of 6 out of 10 which means that it is potentially dangerous and capable of logging activity and taking screenshots.
Such programs are made to monitor user activity and often function without the consent of the user. Since this software is available in the market, anti-virus programs against it are often not available. The most common form of such software is a keylogger which logs keystrokes and sends the data to the person behind installing this software on the machine. Often even videos and screenshots are taken by such dangerous software.
As per the claim voiced by the providers of this software “This is Invisible surveillance tool that registers every activity on your pc to encrypted logs. It allows you to secretly track all activities from all computer users and automatically receive logs to a desire e-mail accounting.”
Properties of this spyware are autostarting/staying resident, logging of applications ran, logging IM, logging URLs of web pages, logging e-mail, logging keystrokes and
logging passwords.
The following files need to be removed:
[%SYSTEM%]\MSTRC32.DLL
[%SYSTEM%]\rgcvt32.dll
[%PROGRAMS%]\relytec\all in one keylogger guide.lnk
[%PROGRAMS%]\relytec\all in one.lnk
[%PROGRAMS%]\relytec\purchase all in one keylogger.lnk
[%PROGRAMS%]\relytec\uninstall all in one keylogger.lnk
[%PROGRAMS%]\relytec\visit all in one keylogger site.lnk
[%SYSTEM%]\mssidtsra.exe
Folders
[%DESKTOP%]\relytec
[%PROGRAM_FILES%]\1ps-orp-px
[%PROGRAM_FILES%]\Eman_Tresni
[%PROGRAM_FILES%]\Rq2yz2-Lanosrep
Registry Key
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\all in one keylogger 2.6_is1
Registry Values
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, 1ps-o=[%PROGRAM_FILES%]\1ps-orp-px\csrss.exe=
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, eman_=
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, rq2yz=[%PROGRAM_FILES%]\rq2yz2-lanosrep\csrss.exe=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, 1ps-o=[%PROGRAM_FILES%]\1ps-orp-px\csrss.exe=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, eman_=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\all in one keylogger 1.7_is1, displayname=all in one=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\all in one keylogger 1.7_is1, inno setup: app path=[%PROGRAM_FILES%]\1ps-orp-px=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\all in one keylogger 1.7_is1, inno setup: selected tasks=startmenu=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\all in one keylogger 1.7_is1, inno setup: setup version=5.1.5=
Although, you can remove thios spyware manually, it is always better to remove it using automated spyware removal program.