Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

Hello [Keylogger problem] ; ;

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Hello [Keylogger problem] ; ;

Unread postby Haptic » December 11th, 2008, 6:51 pm

Hello, before I start I would like to say I have been doing a lot of work trying to fix this on my own. I have done a lot of reading. But my knowledge on this subject is very little. I will also like to state that this is not my own personal computer, rather a friends computer. Long story short, car accident broke my laptop. Friend lend me his "extra computer"...

Ok my problem is very similar to some of the other people here. For example: http://malwareremoval.com/forum/viewtopic.php?f=11&t=37332

I mainly only use this computer to play Final Fantasy XI. [online game] :cheers:
My biggest concern is getting my account hacked by a key logger.

This is my HijackThis scan:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:48:33 PM, on 12/11/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\lolifox\lolifox.exe
C:\Program Files\PlayOnline\SquareEnix\PlayOnlineViewer\pol.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: (no name) - {72d372f9-4bed-4a44-beca-6ed1b9aa64ff} - C:\WINDOWS\system32\feyogepa.dll (file missing)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\system32\msconfig.exe /auto
O4 - HKLM\..\Run: [CPM47f21419] Rundll32.exe "c:\windows\system32\retugama.dll",a
O4 - HKLM\..\Run: [huzukamova] Rundll32.exe "C:\WINDOWS\system32\voninuti.dll",s
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\RunOnce: [LogiSPSetupNeedReboot] rundll32.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [huzukamova] Rundll32.exe "C:\WINDOWS\system32\voninuti.dll",s (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [huzukamova] Rundll32.exe "C:\WINDOWS\system32\voninuti.dll",s (User 'NETWORK SERVICE')
O20 - AppInit_DLLs: C:\WINDOWS\system32\gidalepu.dll c:\windows\system32\retugama.dll
O21 - SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\retugama.dll
O22 - SharedTaskScheduler: STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\retugama.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Unknown owner - C:\Program Files\Bonjour\mDNSResponder.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe

End of file - 4036 bytes

Thanks for reading, I'll be checking up on a response frequently.
Active Member
Posts: 2
Joined: December 11th, 2008, 6:26 pm
Register to Remove

Re: Hello [Keylogger problem] ; ;

Unread postby Noviciate » December 11th, 2008, 8:01 pm

Run HJT and click on Open the Misc Tools section.
  • Click Open Uninstall Manager...
  • Click Save list... and save it to your Desktop.
  • Copy and paste the file uninstall_list.txt into your next reply.
User avatar
MRU Master
MRU Master
Posts: 6283
Joined: May 25th, 2005, 4:41 pm
Location: Numpty HQ

Re: Hello [Keylogger problem] ; ;

Unread postby Haptic » December 11th, 2008, 8:23 pm

Adobe Anchor Service CS3
Adobe Asset Services CS3
Adobe Bridge CS3
Adobe Bridge Start Meeting
Adobe Camera Raw 4.0
Adobe CMaps
Adobe Color - Photoshop Specific
Adobe Color Common Settings
Adobe Color EU Extra Settings
Adobe Color JA Extra Settings
Adobe Color NA Recommended Settings
Adobe Default Language CS3
Adobe Device Central CS3
Adobe ExtendScript Toolkit 2
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Fonts All
Adobe Help Viewer CS3
Adobe Linguistics CS3
Adobe PDF Library Files
Adobe Photoshop CS3
Adobe Photoshop CS3
Adobe Setup
Adobe Stock Photos CS3
Adobe Type Support
Adobe Update Manager CS3
Adobe Version Cue CS3 Client
Adobe WinSoft Linguistics Plugin
Adobe XMP Panels CS3
Apple Mobile Device Support
Apple Software Update
Ask Toolbar
DivX Web Player
FINAL FANTASY XI: Chains of Promathia
FINAL FANTASY XI: Rise of the Zilart
FINAL FANTASY XI: Treasures of Aht Urhgan
FINAL FANTASY XI: Wings of the Goddess
HijackThis 2.0.2
Java(TM) 6 Update 11
lolifox (0.3.6)
Marvell Miniport Driver
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
Microsoft Visual C++ 2005 Redistributable
Mozilla Firefox (3.0.4)
NVIDIA Drivers
PDF Settings
PlayOnline Viewer & Tetra Master
Realtek AC'97 Audio
Spyware Doctor 6.0
StuffPlug 3
Update for Windows XP (KB951072-v2)
Ventrilo Client
Veoh Web Player Beta
Viewpoint Media Player
VLC media player 0.9.4
Windows Live Messenger
WinRAR archiver

Thanks for the quick response. :cheers:
Active Member
Posts: 2
Joined: December 11th, 2008, 6:26 pm

Re: Hello [Keylogger problem] ; ;

Unread postby Noviciate » December 12th, 2008, 4:10 pm

The main problem with your PC is that it has no security programs installed, neither a firewall nor an anti-virus, and this has led to the quantity of slime that you know have squatting on your hard drive.
Unfortunately given the difficulty in dealing with the effects of infection on a computer without an anti-virus program, the best advice I can give you is to back up any important files and then reformat and reinstall.
I can provide you with links to free security programs, if you wish, but these won't solve your present problem, only help prevent it in future.
User avatar
MRU Master
MRU Master
Posts: 6283
Joined: May 25th, 2005, 4:41 pm
Location: Numpty HQ

Re: Hello [Keylogger problem] ; ;

Unread postby NonSuch » December 20th, 2008, 1:38 am

Due to lack of response, this topic is now closed.

If you still require help, please open a new thread in the Infected? Virus, malware, adware, ransomware, oh my! forum, include a fresh FRST log, and wait for a new helper.
User avatar
Posts: 27818
Joined: February 23rd, 2005, 7:08 am
Location: California
Register to Remove

  • Similar Topics
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!

Who is online

Users browsing this forum: No registered users and 82 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware