Skip to content

Commit 92044e4

Browse files
Update README.md
Added Removal Method of TechNowLogger in Linux OS
1 parent 7335dc3 commit 92044e4

File tree

1 file changed

+25
-1
lines changed

1 file changed

+25
-1
lines changed

README.md

+25-1
Original file line numberDiff line numberDiff line change
@@ -131,13 +131,37 @@ $ python technowgen.py -e [email protected] -p YourEmailPass -w -o output_file
131131
#### Report 3 - With Screenshots
132132
![](/img/10.report-2.png)
133133

134-
## Removing TechNowLogger:
134+
## Removing TechNowLogger in Windows:
135+
136+
#### Method 1:
135137

136138
* Go to start, type regedit and run the first program, this will open the registry editor.
137139
* Navigate to the following path Computer\HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run There should be an entry called svchost, right click this entry and select Delete.
138140
* Go to your user path > AppData > Roaming, you’ll see a file named “svchost.exe”, this is the RAT, right click > Delete.
139141
* Restart the System.
140142

143+
#### Method 2:
144+
* Run "RemoveTechnowLogger.bat" in Infected System and then restart the PC to stop the current Running Evil File.
145+
146+
147+
148+
## Removing TechNowLogger in Linux:
149+
150+
* Open Autostart file with any text editor,
151+
****Autostart File Path: ~/.config/autostart/xinput.desktop****
152+
* Remove these 5 lines:
153+
154+
[Desktop Entry]
155+
Type=Application
156+
X-GNOME-Autostart-enabled=true
157+
Name=Xinput
158+
Exec="destination_file_name"
159+
160+
* Note: **destination_file_name** is that name of evil_file which you gave
161+
to your Keylogger using -o parameter
162+
* Reboot your system and then delete the evil file stored this this below path
163+
* Destination Path, where Keylogger is stored : **~/.config/xnput**
164+
141165
## Contribute
142166

143167
* All Contributors are welcome, this repo needs contributors who will improve this tool to make it best.

0 commit comments

Comments
 (0)