Page 1 of 1

Recommended keylogger-cleaning software.

Posted: 2007-10-19 05:51am
by Advocate
As topic says, can anyone recommend me a good keylogger cleaner? I apparently got myself keylogged after letting a friend of mine who recently moved here use my PC to check his WoW account. Nothing's missing yet, but I'm starting to get paranoid.

I'm currently running Spybot S&D and AVG Free Edition, but I have a feeling that Spybot may be compromised in some manner - it randomly stops checks, saying that the scan was aborted by the user, even though I didn't touch a thing.

AVG says my hosts file under system32/drivers/etc has been changed, but apparently doesn't do anything to fix the problem.

Help please? :(

Re: Recommended keylogger-cleaning software.

Posted: 2007-10-19 05:52am
by Edi
Advocate wrote:As topic says, can anyone recommend me a good keylogger cleaner? I apparently got myself keylogged after letting a friend of mine who recently moved here use my PC to check his WoW account. Nothing's missing yet, but I'm starting to get paranoid.

I'm currently running Spybot S&D and AVG Free Edition, but I have a feeling that Spybot may be compromised in some manner - it randomly stops checks, saying that the scan was aborted by the user, even though I didn't touch a thing.

AVG says my hosts file under system32/drivers/etc has been changed, but apparently doesn't do anything to fix the problem.

Help please? :(
Back up your data and reinstall the machine.

Posted: 2007-10-19 06:12am
by Advocate
Ugh. That bad? No other option available?

Posted: 2007-10-19 06:17am
by bilateralrope
Maybe a hijackthis log will show something we can help you get rid of, but a reinstall is the only sure way to get everything.

Posted: 2007-10-19 06:35am
by Advocate
Alright, posted in the sticky. Thanks.

Posted: 2007-10-19 08:56am
by Edi
If I knew my comp was inflicted with some keylogger, I wouldn't dick around with removal tools that may or may not work. Data (=Firefox & Thunderbird profiles) backup to next partition and nuke the site from orbit, there's nothing else there as needs rescuing. All otehr data is on non-OS partition, so while reinstalling all the software and games would be a bitch and a half, but at least there would be no doubt of the end result.

Posted: 2007-10-19 11:36am
by Beowulf
Nuke from orbit. Once the system has been compromised, you don't know what else has been installed, or that you've managed to get everything.

Posted: 2007-10-19 04:03pm
by Uraniun235
I once heard about a LAN party where some guy installed keyloggers on everyone's computer while they were sleeping. Only got caught because one of the computer's web browser was set to open the last-viewed web page when started, and the user got really suspicious after seeing a keylogger website come up.