IMEvtMgr.exe is a Trojan.Keylog-AR. IMEvtMgr.exe records keystrokes. Related files: %System%\IMEvtMgr.exe %System%\khook.dll %System%\mhook.dll More info: http://www.sophos.com/virusinfo/analyses... Removal: Kill IMEvtMgr.exe process and remove IMEvtMgr.exe from Windows startup using antivirus (also check How To Remove section)Startup Optimizer.