also if ur router or firewall supports domain blocking block this while trying to remove
drivehq.com/file/df.aspx/shareID5941010/fileID355769187/fuckingdl.exe
this is the url the fake hack downloads the keylogger from so if u block this and remove the files it wont be able to reinstall itself.
still need to find reg keys and other files
dave what file u want??