key logger :(

buzy · 04-09-2008, 08:31 AM

hi m new in this community really have a serious prblem . My antiviruse detected that someone sent me a Sc keylogger via email attachment. Its in the threat history of my antivirus . I m not sure that the keylogger is still in my pc or not.. i ran the scan several time nothing found.. but i m not sure . Please tellme wot to do?

**koala** · 04-09-2008, 09:34 AM

Hi buzy, welcome to TSF

As long as you didn't run the keylogger and your anti-virus has quarantined or deleted it, then you should be ok.

Was the file an .exe? Were there any other attachments in the email, and did you open any of them?

buzy · 04-09-2008, 10:19 AM

Quote:

Originally Posted by koala

Hi buzy, welcome to TSF

As long as you didn't run the keylogger and your anti-virus has quarantined or deleted it, then you should be ok.

Was the file an .exe? Were there any other attachments in the email, and did you open any of them?

i downloaded the attachment and then tried to open it. but nothing happened it was a zip file when i received first time and an .exe file when i received second time. My antiviruse scanned the files and still its there in the threat history with the name SC key logger(spyware).:( plz help

**koala** · 04-09-2008, 10:28 AM

If you ever get an email from someone you don't know or you weren't expecting an attached file, it's always best to delete the email without opening it. Never reply to unsolicited or unknown emails.

Which antivirus are you using?

Is the Threat History just a list of quarantined files or is there an option to delete the infected file?

If you clicked the exe to run it then you are infected.

buzy · 04-09-2008, 01:02 PM

Quote:

Originally Posted by koala

If you ever get an email from someone you don't know or you weren't expecting an attached file, it's always best to delete the email without opening it. Never reply to unsolicited or unknown emails.

Which antivirus are you using?

Is the Threat History just a list of quarantined files or is there an option to delete the infected file?

If you clicked the exe to run it then you are infected.

Actually it was suspisious to me.. so i connected the USB and downloaded the attachment in that USB. After that Norton Antiviruse detected that it was a keylogger and its in the quarantined file list in the THREAT HISTORY. when i try to remove it from that list it says that the file has already deleted .

**koala** · 04-09-2008, 01:09 PM

OK, as long as you didn't open the zip or run the exe then you're safe. Your security software caught the keylogger and deleted it.

Run your anti-virus again and set if to do a deep scan of all drives and USB sticks. You could also do an online scan to be sure.

buzy · 04-09-2008, 01:33 PM

Quote:

Originally Posted by koala

OK, as long as you didn't open the zip or run the exe then you're safe. Your security software caught the keylogger and deleted it.

Run your anti-virus again and set if to do a deep scan of all drives and USB sticks. You could also do an online scan to be sure.

my friend m saying that i ran the .exe file. but nothing happened . i mean nothing was downloaded or it dint showed me that something is downloading . juss my Antivirus caught that its a keylogger.
Can u tell me where it shud be in my pc if i have downloaded it. i know the file names tried to search in my pc but no results . m still worried :(

**koala** · 04-09-2008, 01:41 PM

When you run a keylogger file or some other kind of infected files, it won't open a program, it will just do its thing in the background unnoticed, meaning you could be infected and being monitored without knowing it.

It could have renamed itself and moved to a hidden folder, or infected a system file to disguise itself, or added some registry entries under random letters that you won't be able to find without professional help.

If you'd like one of our security analysts to check out your computer, please follow these instructions (5 pages) and post the requested logs in a new thread here.

**Glaswegian** · 04-09-2008, 02:14 PM

buzy - please follow koala's advice.

We cannot tell what is on your system, hidden or otherwise, until you post a set of logs. We cannot start running tools to clean your system without knowing what we are up against - that could cause more harm than good. We can help you, but we need you to help us first.

buzy · 04-09-2008, 02:15 PM

Quote:

Originally Posted by koala

When you run a keylogger file or some other kind of infected files, it won't open a program, it will just do its thing in the background unnoticed, meaning you could be infected and being monitored without knowing it.

It could have renamed itself and moved to a hidden folder, or infected a system file to disguise itself, or added some registry entries under random letters that you won't be able to find without professional help.

If you'd like one of our security analysts to check out your computer, please follow these instructions (5 pages) and post the requested logs in a new thread here.

I m not able to register in this site.. wot shud i rite at username?

Letter-X · 04-14-2008, 11:13 AM

If it is still active press Ctrl+esc+shift then look at the processes and see if any funny processes are running

elf · 04-14-2008, 07:07 PM

Quote:

Originally Posted by buzy

I m not able to register in this site.. wot shud i rite at username?

That link goes to this same forum...just a different subforum. Use the same username and password that you use to log in here.

04-09-2008, 08:31 AM	#1 (permalink)
buzy Registered User Join Date: Apr 2008 Posts: 15 OS: XP	key logger :( hi m new in this community really have a serious prblem . My antiviruse detected that someone sent me a Sc keylogger via email attachment. Its in the threat history of my antivirus . I m not sure that the keylogger is still in my pc or not.. i ran the scan several time nothing found.. but i m not sure . Please tellme wot to do?

04-09-2008, 09:34 AM	#2 (permalink)
koala Moderator Hardware Team Join Date: Mar 2005 Location: UK Posts: 8,192 OS: XP/UBUNTU My System	Re: key logger :( Hi buzy, welcome to TSF As long as you didn't run the keylogger and your anti-virus has quarantined or deleted it, then you should be ok. Was the file an .exe? Were there any other attachments in the email, and did you open any of them? __________________ New members: Subscribe to your thread (Thread Tools) to receive an instant email notification when you get a reply. TSF Folding@Home Team 85015 - details here

04-09-2008, 10:28 AM	#4 (permalink)
koala Moderator Hardware Team Join Date: Mar 2005 Location: UK Posts: 8,192 OS: XP/UBUNTU My System	Re: key logger :( If you ever get an email from someone you don't know or you weren't expecting an attached file, it's always best to delete the email without opening it. Never reply to unsolicited or unknown emails. Which antivirus are you using? Is the Threat History just a list of quarantined files or is there an option to delete the infected file? If you clicked the exe to run it then you are infected. __________________ New members: Subscribe to your thread (Thread Tools) to receive an instant email notification when you get a reply. TSF Folding@Home Team 85015 - details here

04-09-2008, 01:09 PM	#6 (permalink)
koala Moderator Hardware Team Join Date: Mar 2005 Location: UK Posts: 8,192 OS: XP/UBUNTU My System	Re: key logger :( OK, as long as you didn't open the zip or run the exe then you're safe. Your security software caught the keylogger and deleted it. Run your anti-virus again and set if to do a deep scan of all drives and USB sticks. You could also do an online scan to be sure. __________________ New members: Subscribe to your thread (Thread Tools) to receive an instant email notification when you get a reply. TSF Folding@Home Team 85015 - details here Last edited by koala : 04-09-2008 at 01:12 PM.

04-09-2008, 01:41 PM	#8 (permalink)
koala Moderator Hardware Team Join Date: Mar 2005 Location: UK Posts: 8,192 OS: XP/UBUNTU My System	Re: key logger :( When you run a keylogger file or some other kind of infected files, it won't open a program, it will just do its thing in the background unnoticed, meaning you could be infected and being monitored without knowing it. It could have renamed itself and moved to a hidden folder, or infected a system file to disguise itself, or added some registry entries under random letters that you won't be able to find without professional help. If you'd like one of our security analysts to check out your computer, please follow these instructions (5 pages) and post the requested logs in a new thread here. __________________ New members: Subscribe to your thread (Thread Tools) to receive an instant email notification when you get a reply. TSF Folding@Home Team 85015 - details here

04-09-2008, 02:14 PM	#9 (permalink)
Glaswegian Moderator/ Rangemaster TSF Academy; Analyst, Security Team; Oor Wullie; TSF Surgeon and Resident Comic Join Date: Sep 2005 Location: Glasgow Posts: 20,294 OS: Win XP Pro SP3 My System Blog Entries: 9	Re: key logger :( buzy - please follow koala's advice. We cannot tell what is on your system, hidden or otherwise, until you post a set of logs. We cannot start running tools to clean your system without knowing what we are up against - that could cause more harm than good. We can help you, but we need you to help us first. __________________ Iain - Defender of the Haggis and all things Scottish. I don't help by PM - post in the Forums. Ad-Aware::SpywareBlaster::SpyBot::SpywareGuard::SnoopFree::AVG Free::HOSTS File::HijackThis::Donate::5 Steps For Infected PCs

04-14-2008, 11:13 AM	#11 (permalink)
Letter-X Registered User Join Date: Apr 2008 Location: Ireland Posts: 4 OS: Windows Vista SP1	Re: key logger :( If it is still active press Ctrl+esc+shift then look at the processes and see if any funny processes are running