Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

I believe I have some kind of keylogger


  • Please log in to reply
4 replies to this topic

#1 Sheogorath

Sheogorath

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:34 AM

Posted 22 May 2014 - 01:29 PM

I have noticed lately that my free space on the c: drive was shrinking. I did a search with WinDirStat and found out i had 23 710 .png images in "C:\Windows\SysWOW64". In total it was around 18.8 gigabytes of images. After copying all the files over to an external hard drive, i checked the folder again. I noticed it had a lot of files like this one: "2013_11_08_15_26_55.txt". It some king of log file from the keylogger. They contain detailed information on my browsing history and basically everything I have done on my computer.

 

I'm using Windows 7 HP

 

Example:

[*] Window activated. [2014-05-22 17:57:11.973000] 
======================================================================
 Welcome to Facebook - Log In, Sign Up or Learn More - Google Chrome |
======================================================================
 
[*] Taking 10 screenshot for "Facebook" match.
[*] Timestamp: 2014-05-22 17:57:11.973000
 
[*] Taking 10 screenshot for "Sign Up" match.
[*] Timestamp: 2014-05-22 17:57:12.008000
 
[*] Taking 10 screenshot for "Log In" match.
[*] Timestamp: 2014-05-22 17:57:12.042000
 
[*] Taking 10 screenshot for "Google" match.
[*] Timestamp: 2014-05-22 17:57:12.073000
 
and
 

[*] Window activated. [2014-05-22 18:02:47.905000] 
================================================================
 Wolfram|Alpha: Computational Knowledge Engine - Google Chrome |
================================================================
 
[*] Taking 10 screenshot for "Google" match.
[*] Timestamp: 2014-05-22 18:02:47.905000
 
25260            $    -25 %
 
----------------------------------------------------------------------------------------------------------------------------
 
I would really appreciate some help. This have been going on for a long time. The earliest image was taken November 8th 2013.

Edited by Sheogorath, 22 May 2014 - 01:35 PM.


BC AdBot (Login to Remove)

 


#2 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,912 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:04:34 AM

Posted 23 May 2014 - 09:16 PM

This is tricky to find and get out.. You will need to repost a new topic with a DDS log from the guide below.

Please follow this Preparation Guide.
Let me know if all went well.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 Sheogorath

Sheogorath
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:34 AM

Posted 24 May 2014 - 04:56 AM

This is tricky to find and get out.. You will need to repost a new topic with a DDS log from the guide below.

Please follow this Preparation Guide.
Let me know if all went well.

I have done the steps in that guide now. Should I reply with the DDS log?



#4 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:06:34 PM

Posted 24 May 2014 - 06:14 PM

Please post the logs to Virus, Trojan, Spyware, and Malware Removal Logs area -

 

Someone can then review your problem fully ..........



#5 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,912 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:04:34 AM

Posted 24 May 2014 - 08:30 PM

Yes post the DDS log in the new topic.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users