Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

I Think I Have A Keylogger


  • Please log in to reply
7 replies to this topic

#1 iDukeHelp

iDukeHelp

  • Members
  • 170 posts
  • OFFLINE
  •  
  • Local time:02:26 AM

Posted 07 June 2008 - 02:03 PM

Well, I was checking for problems with Spybot Search and Destory. It found a thing called KGBKeylogger. I quickly fixed it.

Any way to be sure that it's completely gone?


Thanks.

BC AdBot (Login to Remove)

 


#2 skyfuser

skyfuser

  • Members
  • 470 posts
  • OFFLINE
  •  
  • Location:California
  • Local time:11:26 PM

Posted 07 June 2008 - 02:11 PM

Take a look at KL-Detector. It's only for 2000 and XP though.
Not foolproof, but I've yet to hear anything about it failing so far.
"If a man is offered a fact which goes against his instincts, he will scrutinize it closely, and unless the evidence is overwhelming, he will refuse to believe it. If, on the other hand, he is offered something which affords a reason for acting in accordance to his instincts, he will accept it even on the slightest evidence. The origin of myths is explained in this way." - Bertrand Russell

#3 iDukeHelp

iDukeHelp
  • Topic Starter

  • Members
  • 170 posts
  • OFFLINE
  •  
  • Local time:02:26 AM

Posted 07 June 2008 - 02:13 PM

I have XP Pro.

#4 iDukeHelp

iDukeHelp
  • Topic Starter

  • Members
  • 170 posts
  • OFFLINE
  •  
  • Local time:02:26 AM

Posted 07 June 2008 - 02:15 PM

Im trying it, thanks for the help.

BRB.

#5 iDukeHelp

iDukeHelp
  • Topic Starter

  • Members
  • 170 posts
  • OFFLINE
  •  
  • Local time:02:26 AM

Posted 07 June 2008 - 02:22 PM

C:\Documents and Settings\Ali\ntuser.dat.LOG
was modified.

C:\Documents and Settings\Ali\ntuser.dat.LOG
was modified.

C:\Documents and Settings\Ali\ntuser.dat.LOG
was modified.

C:\Documents and Settings\Ali\ntuser.dat.LOG
was modified.

C:\Documents and Settings\Ali\ntuser.dat.LOG
was modified.

C:\Documents and Settings\Ali\ntuser.dat.LOG
was modified.

C:\Documents and Settings\Ali\ntuser.dat.LOG
was modified.

C:\Documents and Settings\Ali\ntuser.dat.LOG
was modified.

C:\Documents and Settings\Ali\Desktop\New Text Document.txt
was created.

C:\Documents and Settings\Ali\Desktop
was modified.

C:\Documents and Settings\Ali\ntuser.dat.LOG
was modified.

C:\Documents and Settings\Ali\Recent\New Text Document.txt.lnk
was created.

C:\Documents and Settings\Ali\Recent
was modified.

C:\Documents and Settings\Ali\ntuser.dat.LOG
was modified.

C:\System Volume Information\_restore{C6A03086-6F08-45F2-A376-06906AD72B8E}\RP322\change.log
was modified.

C:\System Volume Information\_restore{C6A03086-6F08-45F2-A376-06906AD72B8E}\RP322
was modified.

C:\Documents and Settings\Ali\ntuser.dat.LOG
was modified.

C:\Documents and Settings\Ali\ntuser.dat.LOG
was modified.

C:\Documents and Settings\Ali\ntuser.dat.LOG
was modified.

C:\Documents and Settings\Ali\ntuser.dat.LOG
was modified.

C:\WINDOWS\system32\config\software.LOG
was modified.

C:\WINDOWS\system32\config\software.LOG
was modified.

C:\WINDOWS\system32\config\software.LOG
was modified.

C:\WINDOWS\Prefetch
was modified.

C:\WINDOWS\Prefetch\NOTEPAD.EXE-336351A9.pf
was modified.

C:\Documents and Settings\Ali\ntuser.dat.LOG
was modified.

C:\Documents and Settings\Ali\ntuser.dat.LOG
was modified.

C:\Documents and Settings\Ali\ntuser.dat.LOG
was modified.

C:\Documents and Settings\Ali\ntuser.dat.LOG
was modified.

C:\Documents and Settings\Ali\ntuser.dat.LOG
was modified.

C:\Documents and Settings\Ali\ntuser.dat.LOG
was modified.

C:\WINDOWS\system32\config\software.LOG
was modified.

C:\WINDOWS\system32\config\software.LOG
was modified.

C:\Documents and Settings\Ali\ntuser.dat.LOG
was modified.

C:\Documents and Settings\Ali\ntuser.dat.LOG
was modified.

C:\Documents and Settings\Ali\ntuser.dat.LOG
was modified.

C:\Documents and Settings\Ali\ntuser.dat.LOG
was modified.

C:\Documents and Settings\Ali\ntuser.dat.LOG
was modified.

C:\Documents and Settings\Ali\ntuser.dat.LOG
was modified.

C:\WINDOWS\system32\config\software.LOG
was modified.

C:\WINDOWS\system32\config\software.LOG
was modified.

C:\WINDOWS\system32\config\software.LOG
was modified.

C:\WINDOWS\system32\config\software.LOG
was modified.

C:\WINDOWS\Prefetch\MSPAINT.EXE-11CBB631.pf
was created.

C:\WINDOWS\Prefetch
was modified.

C:\NVIDIA\NetworkAccessManager\nvdb01.adghz
was modified.

C:\Documents and Settings\Ali\ntuser.dat.LOG
was modified.

C:\Documents and Settings\Ali\ntuser.dat.LOG
was modified.

C:\Documents and Settings\Ali\ntuser.dat.LOG
was modified.

C:\Documents and Settings\Ali\ntuser.dat.LOG
was modified.

C:\Documents and Settings\Ali\ntuser.dat.LOG
was modified.

C:\Documents and Settings\Ali\Application Data\Mozilla\Firefox\Profiles\xql0z93l.default\sessionstore-1.js
was created.

C:\Documents and Settings\Ali\Application Data\Mozilla\Firefox\Profiles\xql0z93l.default\sessionstore-1.js
was created.

C:\Documents and Settings\Ali\Local Settings\Application Data\Mozilla\Firefox\Profiles\xql0z93l.default\Cache\_CACHE_001_
was modified.

C:\Documents and Settings\Ali\Local Settings\Application Data\Mozilla\Firefox\Profiles\xql0z93l.default\Cache
was modified.

C:\Documents and Settings\Ali\Local Settings\Application Data\Mozilla\Firefox\Profiles\xql0z93l.default\Cache\_CACHE_002_
was modified.

C:\Documents and Settings\Ali\Application Data\Mozilla\Firefox\Profiles\xql0z93l.default\cookies-1.txt
was created.

C:\Documents and Settings\Ali\Application Data\Mozilla\Firefox\Profiles\xql0z93l.default\sessionstore-1.js
was created.

C:\Documents and Settings\Ali\Application Data\Mozilla\Firefox\Profiles\xql0z93l.default\sessionstore-1.js
was created.

C:\Documents and Settings\Ali\Local Settings\Application Data\Mozilla\Firefox\Profiles\xql0z93l.default\Cache\_CACHE_001_
was modified.

C:\Documents and Settings\Ali\Local Settings\Application Data\Mozilla\Firefox\Profiles\xql0z93l.default\Cache\_CACHE_002_
was modified.

C:\Documents and Settings\Ali\Application Data\Mozilla\Firefox\Profiles\xql0z93l.default\cookies-1.txt
was created.

C:\Documents and Settings\Ali\Application Data\Mozilla\Firefox\Profiles\xql0z93l.default\sessionstore-1.js
was created.

C:\Documents and Settings\Ali\Application Data\Mozilla\Firefox\Profiles\xql0z93l.default\sessionstore-1.js
was created.

C:\Documents and Settings\Ali\Local Settings\Application Data\Mozilla\Firefox\Profiles\xql0z93l.default\Cache\_CACHE_001_
was modified.

C:\Documents and Settings\Ali\Application Data\Mozilla\Firefox\Profiles\xql0z93l.default\cookies-1.txt
was created.

C:\Documents and Settings\Ali\Local Settings\Application Data\Mozilla\Firefox\Profiles\xql0z93l.default\Cache\_CACHE_001_
was modified.

C:\Documents and Settings\Ali\Application Data\Mozilla\Firefox\Profiles\xql0z93l.default\sessionstore-1.js
was created.

C:\Documents and Settings\Ali\Local Settings\Application Data\Mozilla\Firefox\Profiles\xql0z93l.default\Cache\_CACHE_001_
was modified.

C:\Documents and Settings\Ali\Application Data\Mozilla\Firefox\Profiles\xql0z93l.default\cookies-1.txt
was created.

C:\Documents and Settings\Ali\Application Data\Mozilla\Firefox\Profiles\xql0z93l.default\sessionstore-1.js
was created.

#6 iDukeHelp

iDukeHelp
  • Topic Starter

  • Members
  • 170 posts
  • OFFLINE
  •  
  • Local time:02:26 AM

Posted 07 June 2008 - 02:27 PM

Any look suspicious?

#7 iDukeHelp

iDukeHelp
  • Topic Starter

  • Members
  • 170 posts
  • OFFLINE
  •  
  • Local time:02:26 AM

Posted 07 June 2008 - 02:33 PM

If that doesn't show any signs of a KL, would you like to inspect a Hijack This log?

#8 skyfuser

skyfuser

  • Members
  • 470 posts
  • OFFLINE
  •  
  • Location:California
  • Local time:11:26 PM

Posted 07 June 2008 - 03:34 PM

I'm not an expert on this, but it doesn't show signs that there's a keylogger log on your computer. I think you're safe, no need to post a HijackThis :thumbsup:
But if you're still paranoid, try an online antivirus scan from here or a2's online malware scanner from here. I see you use Firefox, so if you don't want to fire up Internet Explorer just get IE Tabs.
"If a man is offered a fact which goes against his instincts, he will scrutinize it closely, and unless the evidence is overwhelming, he will refuse to believe it. If, on the other hand, he is offered something which affords a reason for acting in accordance to his instincts, he will accept it even on the slightest evidence. The origin of myths is explained in this way." - Bertrand Russell




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users