My computer was running really slow this morning so I went to scan my computer, but Avast is amazing and the warning about a virus popped up before the scanner loaded. I moved this virus to my chest and I deleted a couple adware files. I downloaded the file that the trojan came from about 3 weeks ago and I’m almost positive thats it’s a key logger.
So my question is, as long as the virus/key logger is in my chest it wont be harming my computer or stealing any passwords will it? Should I just delete it from my chest since it’s a key logger and i don’t need the file anyways? I just wanted to make sure before i sign in to the website i think the key logger is for.
It is safe in the chest, but if it was definitely a keylogger then it would be wise to change your passwords, etc. especially if you do on-line banking, etc.
What is the infected file name, where was it found e.g. (C:\windows\system32\infected-file-name.xxx) ?
Check the avast! Log Viewer (right click the avast icon), Warning section, this contains information on all avast detections.
You have done the right thing, ‘first do no harm’ don’t delete, send virus to the chest and investigate.
There is no rush to delete anything from the chest, a protected area where it can do no harm. Anything that you send to the chest you should leave there for a few weeks. If after that time you have suffered no adverse effects from moving these to the chest, scan them again (inside the chest) and if they are still detected as viruses, delete them.
Setup_AKL is why i think it’s a key logger. My computer is really slow now also, I did an Avast scan earlier, an Ad-Aware scan from Lavasoft, and a Tune Up Styler Maintenance. I wonder whats going on…
A "Keylogger" is best fought against by an antiSPYWARE/antiTROJAN
program ; since Ad-Aware is no longer one of the top 2 such programs,
I recommend you use the FREE version of SUPERAntiSpyware from
www.superantispyware.com .
It is always wise to give the SPECIFIC Name of your Operating
System when Posting a Request for Help !?
Where you see the … dots this indicates that there is more text and if you hover your mouse pointer on the column header you will see the pointer change to a double arrow, left click and drag to the right. This will expand the column width, this is common through most windows programs where columns are used.
A google search for Setup_AKL.exe returns many hits and indicates this is ardamax keylogger spyware, so better in your chest. A scan with an anti-spyware tool would be advised to see if there is any remnants or anything else.
If you haven’t already got this software (freeware), download, install, update and run it, preferably in safe mode.
I’m downloading AVG anti-spyware right now and I’ll tell you the results later. Just to make sure one last time, the person who set up the key logger will not be able to steal any of my passwords as long as it is in the chest? The same thing goes for when i delete the file all together? Thanks for the help, so much quicker than I expected.
Now the keylogger is in the chest no problem (or when deleted) it won’t be able to steal passwords, etc. But you can’t take the chance it didn’t in the time it was there, so it is advisable to change your passwords.
I just go to a couple forums like these and I have no valuable information there. I did reset my passwords on a couple more important websites. I ran the AVG anti-spyware and I ended up deleting 309 tracking cookies of medium risk and 1 high risk Trojan.small. Did I do the right thing?
Deletion of the tracking cookies (negligible risk almost insignificant) is fine, but for proper files, deletion is never a god first option, AVG-AS has a quarantine and that is the best place for the possible trojan.small file.
What was the infected file name and location of the trojan.small item ?
AVG-AS would be the only place to show that somewhere in its Reports (depends on if you set it up to log the scans) or the Infections section, Quarantine Tab if you sent it there (no evidence if you deleted it).
It may be too late, which is why deletion is a poor first choice.
Hi B3 :
