keyhook.exe problem

Sorry, Howard, don't want to be a pain but all kinds of funny things are popping up all over the computer. And on startup Zonealarm warns that "SiS compatible Super VGA Keyboard Daemon" is trying to access the trusted zone. I've never heard of that keyboard before. The application associated with it is keyhook.exe. Is this a virus problem? Also there are these desktop configuration notes appearing all over the computer in all the folders. I tried to delete them all. Here's a new HJK log. Sorry for the problem. By the way, should I get rid of those two file missing entries in HJK or does'nt it matter?

its look that its ok
did you have any Acer things on the PC?
maybe "SiS compatible Super VGA Keyboard Daemon" is related to this keyhooker
anyway - "Super VGA Keyboard Daemon" sounds strange to me

Regards

re: Acer

Hi, It sounds strange to me too especially since in all the time I've used this computer it's never done that before. It is a laptop Acer Aspire 3502 NLCi though. Looking it up in Everest, the keyboard is a standard 101/102-key or Microsoft Natural PS/2 Keyboard.Doesn't say anything about Daemon.

Do you think it has to do with that hardware update from Microsoft? It was an optional update. However all the antivirus programs don't show any viruses.

look at this

you say that your laptop is Acer Aspire
its ok and i dont see any problem in this keyhooker (except the name)

Regards

Thanks Gars, that's good news. Can you please tell me how to get rid of the desktop notes that are appearing in all the folders of the computer. I cancel them but they just keep coming back.

Your HJT log is clean.

You can fix the two file missing entries if you like, but their not harmful.

As Gars quite rightly says, the keyhook.exe file is safe and is nothing to worry about.

The SiS compatible Super VGA Keyboard Daemon is a legit application, so no worries there.

Can you give me an example of what you mean by "funny things are popping up all over the computer"?

Regards Howard

This thread is for the use of CelineTherese only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

unable to view screenshots-Trojan killAV. virus?

Hi there at Techspot, it's been a while since I posted my pc problems on the forum but I got a problem again and I need your help.

I noticed that I am unable to view the screenshots that people post on forums, at least a grand part of them including my own. They appear at first then disappear altogether. I ran my AVG ANTISPYWARE and it found a "trojan kill AV".

Do you think that was the problem? There are no more viruses revealed on the computer. After running all the anti-virus programs-AVG, Spybot S+Destroy,Ad-aware SE, I disabled system restore, rebooted my pc in safe mode and ran a HJT scan. My log is attached-can you see if there are any more viruses on my pc? Thanks in advance, I really appreciate all your help!

Your HJT log is clean.

However, I need to see a HJT log that`s been run from normal mode, not safe mode.

Regards Howard

This thread is for the use of CelineTherese only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

Hi, Howard! O.K. here is my HJT log in normal mode.

By the way do you know why I can't see any screenshots posted by "Imageshack.com"? The ones by "Tinypic.com" I can see. I would like to be able to see also the ones by Imageshack like other forum users.

I`d like you to have the following file checked.

Please visit this link http://virusscan.jotti.org/
* Click the Browse... button
* Navigate to the following file C:\Program Files\Samsung\Internet Access\Internet Access.exe
* Click Open
* Please let me know the results and post a fresh HJT log.

Regards Howard

This thread is for the use of CelineTherese only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

O.K. Howard, I followed your instructions. This is what came up:

Warning: filesize() [function.filesize]: Stat failed for /tmp/phpxmscap (errno=2 - No such file or directory) in /var/www/virusscan.jotti.org/index.php on line 322
The file you uploaded is 0 bytes. It is very likely a firewall or a piece of malware is prohibiting you from uploading this file

By the way, Internet access is the program that came with my cell phone which connects me to the internet. Is it a problem? I did have a lot of problems installing it and sometimes it cuts me off from the internet by itself.

Here's my HJT log.

In that case there isn`t a problem with the Internet Access.exe file.

Your HJT log is clean.

If you have any further virus/spyware problems, please post in this thread.

Regards Howard

This thread is for the use of CelineTherese only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

Just thanks!

For the good news just want to say thanks once again! I also really appreciate all your help!:wave:

I think I got a virus.

Dear friend at Techspot, hello again. It's been a long time sice I last posted but I think I got a problem. I use my cell phone to connect to the internet and I never had any problems with it before but starting last week money has been disappearing from the cell without any explanation. The phone company that supplies my internet connection can't explain the money loss as they say I have no debts but they can see the money is going. The lady that replied says maybe I have a virus. Please could Howard or any of you guys help me? I have been running virus scans but nothing shows up. They all say I'm clean. Here's my HJT report. Please help as I won't have any money left after awhile!

Hi,

Your HijackThis log appears to be clean. However,

You are running an outdated version of HijackThis.
You can obtain the latest version from the link in my signature.
I would also require a ComboFix log to be doubly sure that your system is clean.

In any case, I would recommend you to read this thread HERE, and also call your bank to inform them about this. You would most likely need to change all your passwords and other account information.

Please post a fresh HijackThis and ComboFix log in your next reply. Thanks.


Regards,
Your friendly momok =)

This thread is for the use of CelineTherese only. Please don't post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

Hello, momok! Thanks for your reply. I have downloaded the newer version of HijackThis and run a test following your advice. Also here's the comboFix log and the new HJT log. I am worried about that money business. Thank you for your help. It is much appreciated!

Hi,

Both your logs look clean.
I presume that your password and account details have somehow leaked out and somebody is using them without your knowledge. I'm not sure how the whole thing works, or how your cell phone loses your money; I can only suggest you liaise with the phone company about this issue and let them provide you with the best advice to deal with this matter since they are the authority on this subject.

Should you have any further problems feel free to post in this thread.


Regards,
Your friendly momok =)

This thread is for the use of CelineTherese only. Please don't post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

Thank you momok for all your help! Will try to settle things right away with the phone company. Keep on with the good work!