The Story of Victims and Default IME Trojan
Victims are struggling to remove Default IME Trojan. Default IME Trojan blocks mbam.exe from running though it has been renamed. Also, Default IME Trojan is able to catch keyboard presses. They want it to go away but it is acting very stubborn. They've already tried some things to disable it: remove ImmAssociateContext(hWnd, (HIMC)NULL). But this doesn't fully disable it and it only partially goes away. Removing the Default IME folder is also tried, but all failed and Default IME is still capable of grabbing keyboard strikes.
