Windows 7 Support
Become a Fan of PCHF on Facebook!
User Reviews - Add Yours!
The PCHF Lounge
Go Back   PC Help Forum » Security & Safety » Anti-Virus
Register for a Free Account

Anti-Virus - Keylogger Virus posted in the Security & Safety forums; Hi there, I wonder if you can help. I exe'ed a file and it contained a keylogger virus that hides me system 32 folder in windows. I have used NOD32 ...

Advertisement
Advertisement

Reply
Free PC Performance Scan
Old 06-06-2006   #1
Bronze Member
 
Join Date: Mar 2006
Posts: 42
Default Keylogger Virus

Hi there,
I wonder if you can help. I exe'ed a file and it contained a keylogger virus that hides me system 32 folder in windows. I have used NOD32 and if find's the virus but states it cannot delete it because it is in operator memory. I changed me virus checker to kaspersky but that will not find it. Can anyone help me out please?

Thanks you

Da_Boo
furryboo is offline   Reply With Quote
Old 06-06-2006   #2
Friend of PCHF
 
Join Date: Sep 2004
Location: Right here !
Posts: 2,148
Default

Hey there furryboo,

Try booting into safemode and then running your antivirus software, the virus shouldn't be activated when in safemode.

Do you know the name of the virus/keylogger?

Last edited by Zimbo; 06-06-2006 at 08:13 AM.
Zimbo is offline   Reply With Quote
Old 06-07-2006   #3
Elite Member
 
joe5's Avatar
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,021
Default

See if this gets youre system32 folder to show again:

Go to start/run/cmd and type/copy: attrib c:\Windows\system32 -a -h -r -s and press enter.

If that doesn't work , and if youre AV still cant remove the keylogger then please follow the instructions in the "prework" link below in my sig , and post back with the 2 resulting log files.
__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -

joe5 is offline   Reply With Quote
Old 06-07-2006   #4
Bronze Member
 
Join Date: Mar 2006
Posts: 42
Default

Cheers peeps for the help so far.

When I type that in it does bring back system 32 folder but when I reboot back in to windows it disappears again. I have tried virus checker in windows and in safemode......still happens.

Cheers

Da_Boo
furryboo is offline   Reply With Quote
Old 06-08-2006   #5
Bronze Member
 
Join Date: Mar 2006
Posts: 42
Default

Problem as first post.

Cheers

Da_Boo
Attached Files
File Type: log hijackthis.log (9.8 KB, 3 views)
File Type: txt Spy Sweeper Session Log.txt (2.9 KB, 2 views)
File Type: txt Scan report_20060608.txt.txt (1.2 KB, 2 views)
furryboo is offline   Reply With Quote
Old 06-10-2006   #6
Elite Member
 
joe5's Avatar
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,021
Default

Hya Furryboo.

Looks like Spysweeper has gotten rid of the keylogger.

But i dont see a firewall running on youre pc , it is recommended to have one running to be better protected. Have a look in our download section for some free firewalls if needed.

Does the system32 folder stay visible now? And if yes , do you still have any other problems?

If not , or if you still have other problems , then do a Panda active scan here:

http://www.pandasoftware.com/products/activescan

And post the log from it when done please.
__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -

joe5 is offline   Reply With Quote
Old 06-11-2006   #7
Bronze Member
 
Join Date: Mar 2006
Posts: 42
Default

Please see attached fiel and help.

Thank you

Da_Boo
Attached Files
File Type: txt Activescan.txt (6.8 KB, 1 views)
furryboo is offline   Reply With Quote

Reply

Bookmarks

Tags
keylogger, virus

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On




All times are GMT. The time now is 06:52 PM.
Powered by vBulletin
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.3.2