Lt.Worf
2008-01-24, 22:16
Hello,
today a spybot scan show me following:
NiceSpy.XPKeylogger: Interface (Registrierungsdatenbank-Schlüssel, fixed)
HKEY_CLASSES_ROOT\Interface\{08B9999C-DAD2-4353-B25B-8CCAFFCA4D16}
NiceSpy.XPKeylogger: Interface (Registrierungsdatenbank-Schlüssel, fixed)
HKEY_CLASSES_ROOT\Interface\{23E86816-772B-4B28-A924-A135CFF6469A}
NiceSpy.XPKeylogger: Interface (Registrierungsdatenbank-Schlüssel, fixed)
HKEY_CLASSES_ROOT\Interface\{41DBA1FA-44F6-4BD5-82DF-1A7FDEA0475D}
NiceSpy.XPKeylogger: Interface (Registrierungsdatenbank-Schlüssel, fixed)
HKEY_CLASSES_ROOT\Interface\{E05AEA1E-BCB1-473A-8B2A-4829D9E1AD23}
I have fixed this and a new scan do not shows them any more.
I also run AdAware, GDATA Virusscan, WindowsDefender and RootkitRevealer with no virus detection.
I run HijackThis and looked in my Autoruns and seems to be ok.
I also search in my files and registry for nicespy-files (google):
%programfiles%\nicespy system expert\gdiplus.dll
%programfiles%\nicespy system expert\spydll.dll
%programfiles%\nicespy system expert\messenger.dll
I found nothing.
My question is: Was this really a keylogger and should I do anything else? Can I be sure that the keylogger is deleted?
P.S. Sorry for my bad english :-)
--
Lt.Worf
today a spybot scan show me following:
NiceSpy.XPKeylogger: Interface (Registrierungsdatenbank-Schlüssel, fixed)
HKEY_CLASSES_ROOT\Interface\{08B9999C-DAD2-4353-B25B-8CCAFFCA4D16}
NiceSpy.XPKeylogger: Interface (Registrierungsdatenbank-Schlüssel, fixed)
HKEY_CLASSES_ROOT\Interface\{23E86816-772B-4B28-A924-A135CFF6469A}
NiceSpy.XPKeylogger: Interface (Registrierungsdatenbank-Schlüssel, fixed)
HKEY_CLASSES_ROOT\Interface\{41DBA1FA-44F6-4BD5-82DF-1A7FDEA0475D}
NiceSpy.XPKeylogger: Interface (Registrierungsdatenbank-Schlüssel, fixed)
HKEY_CLASSES_ROOT\Interface\{E05AEA1E-BCB1-473A-8B2A-4829D9E1AD23}
I have fixed this and a new scan do not shows them any more.
I also run AdAware, GDATA Virusscan, WindowsDefender and RootkitRevealer with no virus detection.
I run HijackThis and looked in my Autoruns and seems to be ok.
I also search in my files and registry for nicespy-files (google):
%programfiles%\nicespy system expert\gdiplus.dll
%programfiles%\nicespy system expert\spydll.dll
%programfiles%\nicespy system expert\messenger.dll
I found nothing.
My question is: Was this really a keylogger and should I do anything else? Can I be sure that the keylogger is deleted?
P.S. Sorry for my bad english :-)
--
Lt.Worf