PDA

View Full Version : key logger g data G Data PC Spion.



craigg
23-01-2005, 08:07 AM
Arrrg. My nephew left a little surprise on my pc. G Data PC Spion. A key logger I believe running with commh32 oxpll fdxxl in the msconfig startup list.

Try to get rid of it with no avail, ran 3 different spy removals with no luck. Edited the reg with what little info I could fined but the start up items keep appearing.  the nephew is in denial and gone home now, fire wall will stop any uploading (none so far, )

Ideas 4 removal?
:mad: :@@:

drcspy
23-01-2005, 08:29 AM
yep find the program file and goto safe mode then delete it .......also you may find this program useful for removeing ALL traces from teh registry.....jstu run it then do a search using it for any mention of the offending prog then delete all.....

http://www.resplendence.com/download/reglite.exe

and this one too......

http://www.sofotex.com/cgi-bin/ls/jump.cgi?ID=4965

drcspy
23-01-2005, 08:30 AM
AND.........run an antivirus program.........most will locate keyloggers as they often are a function of viruses......

craigg
09-02-2005, 11:11 PM
thanks heeps. Nasty bugger was every where. cleened the reg and searched through all folders 4 its hooks. duel booting and partishining made it a nightmear oh and sys restore got me once 2 dhuuuuu, turned it off. all better now

Just 4 the record if any one searches this forum, u gota shearh the reg and HD 4 these files an entries

msshll.exe, scnex.exe and mhhook.dll odccll.dll, xscn.dll, PCSP.ICO, PCSpion.txt, PCSpion.hlp, PCSpion.cnt, commh32.exe and fdxxl.exe oxpll.exe

When u search the reg just search 4 the above name without the extentions added on or u will miss them. Discovered all the hooks at a russhen sight that google translated (well allmost translated haha)

Oh an i ran 3 lots of spywear - none got it out.