Removing Diablo Keys?

I think my system may be infected with Diablo Keys. Here's the story:

I signed onto AOL which has a new SpyZapper feature. AOL's SpyZapper detected that I have Diablo Keys.

I ran Ad-Aware, Spybot S&D, and Symantec AntiVirus and they showed that my system was completely clean.

Then, I Googled "Diablo Keys" and I came across a website (http://www.2-spyware.com/remove-diablo-keys.html) that listed all the processes and files associated with Diablo Keys. I checked my system and none of the processes were running and none of the files were there...except for one file called hand.ani.

So my questions are the following:

1. What else can I do to make sure that I don't have Diablo Keys?
2. Is hand.ani a malicious file?

Thanks in advance for any help :)

Rename the file to hand.ani.old and restart the computer.... Do whatever you do and see if anything odd occurs.

If it doesn't, you're fine.....

Thanks! I renamed the file and rebooted my computer...but 2 of the past 3 times I rebooted my computer I got a "Generic Host Processes for Win32 Services" error.

Also, is it normal to have 5 instances of svchost.exe running? Two of them are running under user name "System", two are running under "Network Service" and the last one is running under "Local Service".

If you have even one of those files listed you may consider your self comprimised. More research is in store for you and best of luck to ya

For your svchost.exe questions, try this link: http://support.microsoft.com/?kbid=314056
If you ever have questions about win files, support.micro...... is usually a good place to start digging.

Quote:

---

Originally posted here by BlackBox80

2. Is hand.ani a malicious file?

---

http://www.2-spyware.com/file-hand-ani.html (Google == powerful. :D)

- Xierox