Need a Program to Get Rid of Keylogger

General Topics
1

Hi, I want to find out if I have a keylogger on my computer. I know keyloggers keep their processes hidden from Task Manager, so I need a program that can look for them.

I know some programs purposely don’t scan for some keyloggers because companies use them. I will never buy a product from such a company that refuses to scan for all keyloggers.

Can someone please recommend me a good program that scan for ALL keyloggers and remove them?

I have used Ad-Aware SE (a useless program in my opinion), Spy Sweeper, Spybot Search and Destroy, and Kaspersky Online Anti-Virus Scanner. So far nothing has come up, but I can’t help but feel that maybe I do have a well hidden keylogger on my computer or some other backdoor program running.

The thing is, I don’t know if some of these programs purposely exempt some keyloggers from being detected.

By the way, I have also used HiJackThis to see if I have any weird things running, but it doesn’t show anything.

I have also downloaded the ProcessMonitor tool from the Microsoft Website to see all processes running on my computer. But unfortunately, its too complicated for me to understand so I don’t use it.

2

Try AVG Anti-Spyware:

http://www.ewido.net/en/

A maliciously installed keylogger and backdoor might just possibly be hidden by a rootkit. Try a few anti-rootkit scanners and see if anything turns up. Remember that legitimate applications also hide processes sometimes, so don’t just delete anything you find.

I’ve listed most of the more user-friendly anti-rootkit scanners here:

http://www.geocities.com/dontsurfinthenude/antitrojan.htm

3

Thanks for the quick reply Frank. I will test out some of those programs, and if I need more help will come back.

I have heard about this rootkit thing, but I’m not really sure about what it is. I think Spy Sweeper has a rootkit detection function, but I don’t trust Spy Sweeper to detect all keyloggers; I think they purposely keep some from being detected since they say those keyloggers are “legitimate.” I think that is nonsense and leaves home users at risk.

4

Spy Sweeper will detect some rootkits- a rootkit is simply a way to hide processes on a computer- a cloaking device. Not every rootkit detector will detect every rootkit, so try a few different ones.

If any keylogger is present and not protected by a rootkit, it should show up on HijackThis! Post a log for us to look at if you’d like us to double check it.

5

Hi Frank. I’m posting an update on my situation.

I’ve ran AVG Anti-Spyware, AVG Anti-Root Kit Beta, Sophos Anti-Rootkit, F-Secure BlackLight Root-Kit Eliminator, and Bitdefender Anti-Rootkit.

All of them, EXCEPT Sophos Anti-Rootkit, did not detect anything.

I ran the Sophos Anti-Rootkit both normally and in Safe-Mode. Both times it showed the following:

Hidden Registry key

\HKEY_USERS\S-1-5-21-720897496-1709162666-557728558-1007\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts.edu/attach/revised%20statement?sid=DhGTGQMZk2Y&mbox=INBOX&charset=escaped_unicode&uid=1253&number=2&filename=revised%20statement

Removable: No

???

How can I find out what this registry key is doing? Is it a normal thing that is just kept hidden? If not, how can I remove it?

6

hi, jujube
I am using a lovely little FREE program called SnoopFree Privacy Shield version 1.0.7. against these nasty keyloggers and ‘screenreaders’. Very easy to use, it gives instant warning and the option of blocking any keylogger, just block once and problem gone! You will be surprised to find them in Yahoo messenger and Skype and a lot of other “respectable” programs. SnoopFree cannot remove the keylogger, just blocks them. Hope you find it useful! Available at snoopfree.com :wink:

7

I went to check out your recommendation but, the following

http://img.photobucket.com/albums/v190/bob3160/ShellFTP/snoopfree.png

made me change my mind. :cry:

8

Howdy bob3160 en “groetjes aan webwil17”

When you know you have a clean system, install KeyScrambler by QFX Software,
and this makes keylogging a fruitless job. (Echt een goede profylax)

polonus

9

Thanks polonus. :slight_smile:

10

@ Bob3160, SnoopFree has been rated by HijackThis users as ‘very safe’. You don’t need to enter your e-mail address when you download the program…(the program is só easy to use that you won’t probably need the supportsite…) I have been using SnoopFree for over one year now and have never received spam or noticed any other strange things. So I think it is worth trying…
Ofcourse, to keep keyloggers out of your system alltogether, the program Polonus suggests would be best, but if you already have one and do not want to do a clean install, Snoopfree would be quite fine…

@Polonus, dank je en groetjes terug!

@Jujubee, I hope you can make a ‘balanced’ decision now! Just don’t go paranoid !