Security Stronghold security made easy

Power Spy Removal: Remove Power Spy Easily


* What is Power Spy

* Download WiperSoft Antispyware Malware Remediation Tool

* Remove Power Spy manually

* Get Professional Support

* Read Comments


Threat indicator: HIGH

Threat's profile

Name of the threat:

Command or file name:

Threat type:

Affected OS:

Power Spy

pcspy.exe

Spyware/trojan

Win32 (Windows XP, Vista, Seven, 8)


Increasingly, Power Spy is the first stage of an crack and their privileged target is to stay hidden while downloading and installing a stronger threat such as a bot. Unlike virus threats and malwares, Power Spy cannot expand by itself. Power Spy is infiltrate your PC when user unknowingly install the program when they install something else. Some Power Spy centrees on attending a person's Internet behavior; this type of Power Spy often tracks the places you visit and things you do on the Internet, the emails you write and receive, as well as your Instant Messaging (IM) conversations. Wheen Power Spy display advertisings to specific Web sites that users use. Commercial is also a method Power Spy watchs user behavior and uses.


Power Spy

Power Spy intrusion method

Power Spy copies its file(s) to your hard disk. Its typical file name is pcspy.exe. Then it creates new startup key with name Power Spy and value pcspy.exe. You can also find it in your processes list with name pcspy.exe or Power Spy. Also, it can create folder with name Power Spy under C:\Program Files\ or C:\ProgramData.

If you have further questions about Power Spy, please call us on the phone below. It is toll free. Or you can use programs to remove Power Spy automatically below.


Download Spyhunter by Enigma Software

Download this advanced removal tool and solve problems with Power Spy and pcspy.exe (download of fix will start immediately):

Download WiperSoft Antispyware to remove Power Spy

* WiperSoft Antispyware was developed to remove threats like Power Spy in automatic mode. Remover has active module to protect PC from hijackers, trojans, ransomware and other viruses. Trial version of SpyHunter provides detection of computer viruses for FREE. To remove malware, you have to purchase the full version of Spyhunter.

Features of WiperSoft Antispyware

* Removes all files created by viruses.

* Removes all registry entries created by viruses.

* You can activate System and Network Guards and forget about malware.

* Can fix browser problems and protect browser settings.

* Removal is guaranteed - if SpyHunter fails ask for FREE support.

* 24/7 Spyware Helpdesk Support included into the package.


Download Spyhunter Remediation Tool by Enigma Software

Download antimalware designed specifically to remove threats like Power Spy and pcspy.exe (download of fix will start immediately):

Download AntiMalware to remove Power Spy

Features of Spyhunter Remediation Tool

* Removes all files created by Power Spy.

* Removes all registry entries created by Power Spy.

* Fixes browser redirection and hijack if needed.

* "Toolbar Remover" tool will help you get rid of unwanted browser extensions.

* Removal is guaranteed - if Spyhunter Remediation Tool fails ask for FREE support.

* 24/7 Helpdesk Support and 5 hours of Remote Support via GoToAssist included into the package.

Let our support team solve your problem with Power Spy and repair Power Spy right now!

support person

Call us using the number below and describe your problem with Power Spy. Support team will offer you solution in several minutes and give a step-by-step instruction on how to remove Power Spy. Trouble-free tech support with over 10 years experience removing malware.


1-877-219-8984


Software Industry Professionals Member
Threat's description and solution are developed by Security Stronghold security team.

Here you can also learn:

* Technical details of Power Spy threat.

* Manual Power Spy removal.

* Download Power Spy Removal Tool.


How to remove Power Spy manually?

This problem can be solved manually by deleting all registry keys and files connected with Power Spy, removing it from starup list and unregistering all corresponding DLLs. Additionally missing DLL's should be restored from distribution in case they are corrupted by Power Spy.

To get rid of Power Spy, you should:

file logo

1. Kill the following processes and delete the appropriate files:

  • pcspy.exe
  • file.emx
  • tmp.emx
  • psusr.ini
  • mwsvcps.exe
  • wpsproc.exe
  • p22.dat
  • emx11.dat
  • emx6.dat
  • emx10.dat
  • emx1.dat
  • apsvc.exe
  • winserv.exe
  • usrproc.exe
  • thinkertec_spypal.exe
  • reghost.exe
  • p20.dat
  • pscs.exe
  • emxfile.emx
  • navaqsvc.exe
  • symserv.exe
  • testftpok.html
  • psini.ini
  • psappini.ini
  • ~dfd17f.tmp
  • ~dfd4e4.tmp
  • symreg.exe
  • Download_pcspy.exe
  • pssrv.exe
  • eventwin.exe
  • file.ldb

Warning: you should delete only those files which checksums are listed as malicious. There may be valid files with the same names in your system. We recommend you to use WiperSoft Antispyware Malware Remediation Tool for safe problem solution.

**Trial version of SpyHunter provides detection of computer viruses for FREE. To remove malware, you have to purchase the full version of Spyhunter.

windows folder logo

2. Delete the following malicious folders:

  • %programfiles%\power spy\
  • %programfiles%\power spy\logs\
  • %programfiles%\power spy\scrshot\
  • %programfiles%\power spy\common\
  • %programfiles%\spypal\
  • %programfiles%\spypal\common\
  • %programfiles%\pscs\
  • %programfiles%\pscs\data\

windows registry logo

3. Delete the following malicious registry entries and\or values:

  • Key: jmail.SMTPMail
  • Key: jmail.Message
  • Key: jmail.Recipient
  • Key: jmail.Headers\Clsid
  • Key: Interface\{6D7709AA-AE7C-428F-AF75-2A2F1F974457}
  • Key: Interface\{6D7709AA-AE7C-428F-AF75-2A2F1F974457}\ProxyStubClsid
  • Key: Interface\{6D7709AA-AE7C-428F-AF75-2A2F1F974457}\ProxyStubClsid32
  • Key: Interface\{6D7709AA-AE7C-428F-AF75-2A2F1F974457}\Forward
  • Key: Interface\{0D8082AC-477E-435A-B9A8-404A8B7052EA}
  • Key: Interface\{0D8082AC-477E-435A-B9A8-404A8B7052EA}\ProxyStubClsid
  • Key: Interface\{0D8082AC-477E-435A-B9A8-404A8B7052EA}\ProxyStubClsid32
  • Key: Interface\{0D8082AC-477E-435A-B9A8-404A8B7052EA}\Forward
  • Key: Interface\{9F7CD7CE-53E2-44F1-AC62-4A298626E48E}
  • Key: Interface\{9F7CD7CE-53E2-44F1-AC62-4A298626E48E}\ProxyStubClsid
  • Key: Interface\{9F7CD7CE-53E2-44F1-AC62-4A298626E48E}\ProxyStubClsid32
  • Key: Interface\{C813EA5A-B95C-4B88-9624-53596011C924}
  • Key: Interface\{C813EA5A-B95C-4B88-9624-53596011C924}\ProxyStubClsid
  • Key: Interface\{C813EA5A-B95C-4B88-9624-53596011C924}\ProxyStubClsid32
  • Key: Interface\{1664BD52-80E8-42FC-887A-1A707C2197FD}
  • Key: Interface\{1664BD52-80E8-42FC-887A-1A707C2197FD}\ProxyStubClsid
  • Key: Interface\{1664BD52-80E8-42FC-887A-1A707C2197FD}\ProxyStubClsid32
  • Key: Interface\{2965125E-7D2B-4859-8D0F-5C53DB318F51}
  • Key: Interface\{2965125E-7D2B-4859-8D0F-5C53DB318F51}\ProxyStubClsid
  • Key: Interface\{2965125E-7D2B-4859-8D0F-5C53DB318F51}\ProxyStubClsid32
  • Key: Interface\{8281EE9C-8947-4358-8D4F-E21F912271DB}
  • Key: Interface\{8281EE9C-8947-4358-8D4F-E21F912271DB}\ProxyStubClsid
  • Key: Interface\{8281EE9C-8947-4358-8D4F-E21F912271DB}\ProxyStubClsid32
  • Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\Power Spy_is1
    Value: Inno Setup: Setup Version
  • Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\Power Spy_is1
    Value: Inno Setup: App Path
  • Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\Power Spy_is1
    Value: InstallLocation
  • Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\Power Spy_is1
    Value: Inno Setup: Icon Group
  • Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\Power Spy_is1
    Value: Inno Setup: User
  • Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\Power Spy_is1
    Value: DisplayName
  • Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\Power Spy_is1
    Value: UninstallString
  • Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\Power Spy_is1
    Value: QuietUninstallString
  • Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\Power Spy_is1
    Value: Publisher
  • Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\Power Spy_is1
    Value: URLInfoAbout
  • Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\Power Spy_is1
    Value: HelpLink
  • Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\Power Spy_is1
    Value: URLUpdateInfo
  • Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\Power Spy_is1
    Value: NoModify
  • Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\Power Spy_is1
    Value: NoRepair
  • Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\SpyPal_is1
    Value: Inno Setup: Setup Version
  • Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\SpyPal_is1
    Value: Inno Setup: App Path
  • Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\SpyPal_is1
    Value: InstallLocation
  • Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\SpyPal_is1
    Value: Inno Setup: Icon Group
  • Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\SpyPal_is1
    Value: Inno Setup: User
  • Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\SpyPal_is1
    Value: DisplayName
  • Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\SpyPal_is1
    Value: UninstallString
  • Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\SpyPal_is1
    Value: QuietUninstallString
  • Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\SpyPal_is1
    Value: Publisher
  • Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\SpyPal_is1
    Value: URLInfoAbout
  • Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\SpyPal_is1
    Value: HelpLink
  • Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\SpyPal_is1
    Value: URLUpdateInfo
  • Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\SpyPal_is1
    Value: NoModify
  • Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\SpyPal_is1
    Value: NoRepair
  • Key: Software\Digital River\SoftwarePassport\eMatrixSoft\Power Spy\0
    Value: BuyURL
  • Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\Power Spy_is1
    Value: Inno Setup: App Path
  • Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\Power Spy_is1
    Value: InstallLocation
  • Key: CLSID\{48E59293-9880-11CF-9754-00AA00C00908}\InprocServer32
    Data: %system%\p22.dat
  • Key: CLSID\{48E59293-9880-11CF-9754-00AA00C00908}\ToolboxBitmap32
    Data: %system%\p22.dat, 1
  • Key: CLSID\{48E59294-9880-11CF-9754-00AA00C00908}\InprocServer32
    Data: %system%\p22.dat
  • Key: CLSID\{48E59295-9880-11CF-9754-00AA00C00908}\InprocServer32
    Data: %system%\p22.dat
  • Key: TypeLib\{48E59290-9880-11CF-9754-00AA00C00908}\1.0\0\win32
    Data: %system%\p22.dat

Warning: if value is listed for some registry entries, you should only clear these values and leave keys with such values untouched. We recommend you to use WiperSoft Antispyware Malware Remediation Tool for safe problem solution.


4. Manually fix browser problems

Power Spy can affect your browsers which results in browser redirection or search hijack. We recommend you to use free option "Reset Browsers" under "Tools" in Spyhunter Remediation Tool to reset all the browsers at once. Mention that you need to remove all files and kill all processes belonging to Power Spy before doing this. To reset your browsers manually and restore your homepage perform the following steps:

internet explorer logo

Internet Explorer

  • If you use Windows XP, click Start, and then click Run. Type the following in the Open box without quotes, and press Enter: "inetcpl.cpl"

  • If you use Windows 7 or Windows Vista, click Start. Type the following in the Search box without quotes, and press Enter: "inetcpl.cpl"

  • Click the Advanced tab

  • In Reset Internet Explorer settings, click Reset. Click Reset in opened window again.

  • Select Delete personal settings checkbox to remove browsing history, search providers, homepage

  • After Internet Explorer finishes resetting, click Close in the Reset Internet Explorer Settings dialog box

Warning: In case this option will not work use free option Reset Browsers under Tools in Spyhunter Remediation Tool.

google chrome logo

Google Chrome

  • Go to the installation folder of Google Chrome: C:\Users\"your username"\AppData\Local\Google\Chrome\Application\User Data.

  • In the User Data folder, look for a file named as Default and rename it to DefaultBackup.

  • Launch Google Chrome and a new clean Default file will be created.

Warning: This option might not work if in Google Chrome you use online synchronization between PCs. In this case use free option Reset Browsers under Tools in Spyhunter Remediation Tool.

mozilla firefox logo

Mozilla Firefox

  • Open Firefox

  • Go to Help > Troubleshooting Information in menu.

  • Click the Reset Firefox button.

  • After Firefox is done, it will show a window and create folder on the desktop. Click Finish.

Warning: This option will also clean all your account passwords for all websites. If you don't want it use free option Reset Browsers under Tools in Spyhunter Remediation Tool.

Information provided by: Aleksei Abalmasov

DMCA.com Protection Status

Here are the descriptions of problems connected with Power Spy and pcspy.exe we received earlier:

Problem Summary: hello

how to remove power spy... thank you

Problem was successfully solved. Ticket was closed.

Problem Summary: cannot remove powerspy application i downloaded

I downloaded power spy and tried to uninstall it severally but it did not work plshelp

Problem was successfully solved. Ticket was closed.

Problem Summary: power spy stealth mode impossible to unninstal or remove.

About two months ago i went to power spy and download the stealth version and after the downloada a blue rectangle appear in the upper right corner of my laptop that says monitored by power spy and every time i touch it it says that an icon is displayed in the desktop to disable stealth mode in trial version but i didnt see any icon and under that it says purchase or later i dont know what to do but i cant find it.

Problem was successfully solved. Ticket was closed.

Problem Summary: Remove Power Spy Forever

Remove Power Spy Forever

Problem was successfully solved. Ticket was closed.

Problem Summary: silent mode

non riesco ad eliminare il silent mode di power spy e sopratutto a disinstallare il programma

Problem was successfully solved. Ticket was closed.

Problem Summary: I want to remove power spy for ever ..........for ever.

Please get rid me from power spy.

Problem was successfully solved. Ticket was closed.

Problem Summary: i seee it every time on the topright corner of my desktop

i uninstalled everything... deleted the folders.. registry bases but still it show up on the top right corner...

i also figured it out how to open the control panel using ctrl+alt+X.... but then it asks for sum stupid password... and when i type "1" as a password.. it does not accept it...


please.. i need big help... thanks

Problem was successfully solved. Ticket was closed.

Problem Summary: How to Remove Power Spy ICON

I already downloded the software to remove power spy, but the the problem is i cant remove or unistall power spy.The icon keep showing up on my desktop..whenever i close the icon, the new registration icon open up by it self and it said to register and paid 44.5$. Its so confusing, i need your help to unistall the power spy icon on my desktop.

Problem was successfully solved. Ticket was closed.

Problem Summary: Не удаляется Power Spy

Вроде удалила все компаненты, но при запуске ПК появляется регистрация, которая ведёт на сайт программы...помогите, пожалуйста, удалить!

Problem was successfully solved. Ticket was closed.

Problem Summary: remove the icon of facebook power spy

i downloaded the free trial and the powerspy toolbar is still there how do i get rid of it.pls help.thank u

Problem was successfully solved. Ticket was closed.

Show more

Threat in focus: cydoor

« Back to catalog

Home | Partners | Shop | Support | Terms of use | Contact Us | Privacy Policy | Sitemap

Copyright © 2024 Security Stronghold. All Rights Reserved. All content on this website is protected and belongs to Security Stronghold LLC.