NiceSpy.XPKeylogger

[Lt.Worf]

Hello,
today a spybot scan show me following:

NiceSpy.XPKeylogger: Interface (Registrierungsdatenbank-Schlüssel, fixed)
HKEY_CLASSES_ROOT\Interface\{08B9999C-DAD2-4353-B25B-8CCAFFCA4D16}

NiceSpy.XPKeylogger: Interface (Registrierungsdatenbank-Schlüssel, fixed)
HKEY_CLASSES_ROOT\Interface\{23E86816-772B-4B28-A924-A135CFF6469A}

NiceSpy.XPKeylogger: Interface (Registrierungsdatenbank-Schlüssel, fixed)
HKEY_CLASSES_ROOT\Interface\{41DBA1FA-44F6-4BD5-82DF-1A7FDEA0475D}

NiceSpy.XPKeylogger: Interface (Registrierungsdatenbank-Schlüssel, fixed)
HKEY_CLASSES_ROOT\Interface\{E05AEA1E-BCB1-473A-8B2A-4829D9E1AD23}

I have fixed this and a new scan do not shows them any more.
I also run AdAware, GDATA Virusscan, WindowsDefender and RootkitRevealer with no virus detection.
I run HijackThis and looked in my Autoruns and seems to be ok.
I also search in my files and registry for nicespy-files (google):
%programfiles%\nicespy system expert\gdiplus.dll
%programfiles%\nicespy system expert\spydll.dll
%programfiles%\nicespy system expert\messenger.dll
I found nothing.

My question is: Was this really a keylogger and should I do anything else? Can I be sure that the keylogger is deleted?


P.S. Sorry for my bad english

--
Lt.Worf

 

[tashi]

Hello, your English is just fine.

Can I be sure that the keylogger is deleted?

I can understand your concern, if you would like one of our helpers to check the system for you, please follow the procedure in this link to produce a HJT log.
"BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance)

Then start your own thread in the Malware Removal Forum where a helper will advise you when available.

Cheers.

 

[drewsky]

I'd also like some more information on NiceSpy.XPKeylogger. What is the threat level, is it really a keylogger? How concerned should I Be? Is it packaged with a program?

 

[tashi]

Hello.

I'd also like some more information on NiceSpy.XPKeylogger. What is the threat level, is it really a keylogger? How concerned should I Be? Is it packaged with a program?

http://www.symantec.com/security_response/writeup.jsp?docid=2005-050715-2623-99

Best regards.