PDA

View Full Version : NiceSpy.XPKeylogger



Lt.Worf
2008-01-24, 21:16
Hello,
today a spybot scan show me following:

NiceSpy.XPKeylogger: Interface (Registrierungsdatenbank-Schlüssel, fixed)
HKEY_CLASSES_ROOT\Interface\{08B9999C-DAD2-4353-B25B-8CCAFFCA4D16}

NiceSpy.XPKeylogger: Interface (Registrierungsdatenbank-Schlüssel, fixed)
HKEY_CLASSES_ROOT\Interface\{23E86816-772B-4B28-A924-A135CFF6469A}

NiceSpy.XPKeylogger: Interface (Registrierungsdatenbank-Schlüssel, fixed)
HKEY_CLASSES_ROOT\Interface\{41DBA1FA-44F6-4BD5-82DF-1A7FDEA0475D}

NiceSpy.XPKeylogger: Interface (Registrierungsdatenbank-Schlüssel, fixed)
HKEY_CLASSES_ROOT\Interface\{E05AEA1E-BCB1-473A-8B2A-4829D9E1AD23}

I have fixed this and a new scan do not shows them any more.
I also run AdAware, GDATA Virusscan, WindowsDefender and RootkitRevealer with no virus detection.
I run HijackThis and looked in my Autoruns and seems to be ok.
I also search in my files and registry for nicespy-files (google):
%programfiles%\nicespy system expert\gdiplus.dll
%programfiles%\nicespy system expert\spydll.dll
%programfiles%\nicespy system expert\messenger.dll
I found nothing.

My question is: Was this really a keylogger and should I do anything else? Can I be sure that the keylogger is deleted?


P.S. Sorry for my bad english :-)

--
Lt.Worf

tashi
2008-01-26, 02:48
Hello, your English is just fine. :)


Can I be sure that the keylogger is deleted?
I can understand your concern, if you would like one of our helpers to check the system for you, please follow the procedure in this link to produce a HJT log.
"BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) (http://forums.spybot.info/showthread.php?t=288)

Then start your own thread in the Malware Removal Forum (http://forums.spybot.info/forumdisplay.php?f=22) where a helper will advise you when available.

Cheers.

drewsky
2008-02-05, 22:07
I'd also like some more information on NiceSpy.XPKeylogger. What is the threat level, is it really a keylogger? How concerned should I Be? Is it packaged with a program?

tashi
2008-02-06, 00:28
Hello.


I'd also like some more information on NiceSpy.XPKeylogger. What is the threat level, is it really a keylogger? How concerned should I Be? Is it packaged with a program?

http://www.symantec.com/security_response/writeup.jsp?docid=2005-050715-2623-99

Best regards.