Programmer S
Enthusiast
Mar 12, 2007, 10:18 AM
Post #1 of 4
(500 views)
Shortcut
|
|
Prog's Guide on how to remove Keyloggers/Trojans
|
Can't Post
|
|
Yeah, well, I know how to keylog. And I have been keylogged many times before. So I know what a pain it is to get keylogged.. All msn accounts gone. Runescape accounts gone. Forum accounts used by the keylogger, and got banned… All other site accounts gone. So I felt like making a guide on how to remove and detect Keyloggers and Trojans.
Prog's Guide On How To Remove Keyloggers/Trojans
Before you open ANY suspicious files from un-popular sites scan the file at http://virusscan.jotti.org/.
Please remember, you are NOT infected from the file until you actually open it. If it just sits on your computer un-opened you are NOT infected.
(By only scan files from un-popular sites I mean like... You wouldn’t need to scan a file downloaded directly from http://www.microsoft.com since its so well known and trusted would you =P)
ALWAYS have an Anti-Virus installed.
Heres a list of Anti-Virus’s and Firewalls:
AVG FREE (http://FREE.grisoft.com/softw/70FREE/setup/avg75FREE_446a965.exe)
Norton Anti-Virus [I do not recommend getting this, an average Keylogger could get through this.] (http://www.symantec.com/)
AhnLab, Inc (http://global.ahnlab.com/)
McAfee (http://www.mcafee.com/uk/)
Kaspersky Lab (http://www.kaspersky.com/)
ZoneAlarm (http://www.zonelabs.com/)
Removing the Keylogger/Trojan:
Ok, there are a few ways of doing this. One is just run a scan. Two is System Restore. Three is delete the Keylogger directory.
1. The Scan:
Well… I don’t know how to scan with EVERY Anti-Virus. But I’m sure you know how to scan your system with your Anti-Virus. If you need help with a specific one, just post here and either I’ll help, or someone else will post and help you =P
2. System Restore:
Go to Control Panel (Start > Control Panel)
Once your in Control Panel click “Performance And Maintenance”
On the left hand site click “System Restore” , A screenshot is shown below.
(http://img254.imageshack.us/img254/2307/systemrestorecontrolpanzq1.png)
Once you have clicked “System Restore” it should be checked “Restore my computer to an earlier time” by default. Leave it as that and click "Next". It will show a calendar. Choose a day when you did NOT have the virus. (You can only restore to a date which the number is BOLD) I’ll post an example screenshot below.
(http://img364.imageshack.us/img364/5900/calendarthingpv0.png)
Once you have chosen a date to go back too, click “Next”
Please save all unsaved documents which you are working on.
On this page, if you need to, verify that you have clicked the right date and stuff. Then click “Next”.
Your computer should now restart.
Now log onto your Windows Account as normal. And it’ll tell you if the System Restoration was successful, if it was. Congratulations, you managed to go back to the date you didn’t have a virus.
If it isn’t successful, try Restoring your computer back to a different date.
Please note: This is not guaranteed to work. It depends on the virus. It may stay on your computer. But most the time this removes it.
3. Deleting the keylogger directory:
If you know what the keylogger directory is, and what the file is called then go to the directory.
If you don’t know either, the directory is usually C:/Windows/ or C:/Windows/System32/ but not always.
(My Computer > Your C:// hard-drive > Windows)
Delete a suspicious name, BEWARE. Sometimes people call the keylogger thing something like “svchost” , which is critical if you delete the wrong “svchost”, a lot of files in C:/Windows/ and C:/Windows/System32/ are critical if deleted. So beware, I am not responsible If anything happens to your computer, if you delete the wrong one (Constant crashing ect..).
You might get a sucky name like “infected file” or “keylogger” ect. But not many people are dumb enough to do that =P
Well, there you go. ^ That’s my guide. I’m not much of a guide writer… So don’t be harsh. Heh =P
If you have ANY questions concerning virus’s (Apart from how to make them), please ask here.
NOTE: People usualy use a rubbish already made keylogger such as Ardamax, Perfect Keylogger ect which you can remove by scanning most the time. But some people program there own keylogger, which makes it highly undetectable.
DO NOT USE NORTON. It's better than nothing. But still, it realy sucks. I know Ardamax can get through it no problem. Don't know about Perfect Keylogger and others.
RATE THE GUIDE OUT OF 10 PLEASE. =]
Thank-you for reading.
Mods can edit this and add stuff a bit if they wish too. =]
Sticky pl0x? =P
________________________________________________
(This post was edited by Programmer S on Mar 13, 2007, 3:30 AM)
|
FORUM
SEARCH
WHO'S 
LOG 
RULES / FAQ
