How to clean your system from keyloggers and other types of viruses

[Deleted]

Do you guys know if that new Panda Cloud Anti-Virus is any good? The idea behind it is awesome but does anyone actually know if it works nice and it's actually doing what it's suppose to?

http://www.thetechherald.com/article...loud-Antivirus
http://www.youtube.com/watch?v=tAi57MTW5qM

WHAT IS CLOUD ANTIVIRUS

Unlike traditional antivirus software, cloud antivirus refers to the type of antivirus that runs on the cloud(remote server). Cloud Antivirus will scan all your files through the internet and run the tests on their own server, in this way it won’t disrupt any of your computer activity nor will it slow down your computer.

Another benefit of cloud antivirus is that instead of having to update traditional antivirus software routinely, it automatically updates the virus definitions in the cloud and then scans your files to see if it is infected with any of the new virus. It saves the headache of having to manage the antivirus software daily.


Users must have seamlessly fast DSL/Broadband connection in order to make full use of cloud antivirus, without the internet connection the cloud antivirus won’t work. It doesn’t mean that it won’t protect your computer when you are offline, Cloud Antivirus such as Panda Cloud Antivirus saves informations and signatures in the local cache which helps keep the system secure even when it goes offline.

What is Cloud Antivirus?

[Deleted]

HAS BEEN UPDATED!

If you see any errors, please let me know.

[Resa]

I'd also recommend Combofix.
http://www.bleepingcomputer.com/comb...o-use-combofix

Its was just recently rewritten to fix issues so it will no longer remove any files required to boot (it popped up very rarely).

It can remove Emcor & variants, and has removed every keylogger/piece of malware I've thrown at it ('dear' bf has a habit of turning off the AV & getting infected cruising porn sites).

Its very powerful, and as such you don't want to drag & drop any textfile onto it without being told to by a poster in the bleepincomputer.com forums.

[Deleted]

I'd also recommend Combofix.
http://www.bleepingcomputer.com/comb...o-use-combofix

Its was just recently rewritten to fix issues so it will no longer remove any files required to boot (it popped up very rarely).

It can remove Emcor & variants, and has removed every keylogger/piece of malware I've thrown at it ('dear' bf has a habit of turning off the AV & getting infected cruising porn sites).

Its very powerful, and as such you don't want to drag & drop any textfile onto it without being told to by a poster in the bleepincomputer.com forums.

I would personally still only use it if asked for it by an Hijackthis certified user. (People from Bleeping Computer or other Security-forums), because it is so extremely powerfull.

[Resa]

I would personally still only use it if asked for it by an Hijackthis certified user. (People from Bleeping Computer or other Security-forums), because it is so extremely powerfull.

I only mentioned it (sort of as a last resort) as its the only thing right now picking up Emcor & its variants reliably (other than 1 or 2 AVs). Malwarebytes still doesn't have definitions for them, and as such can't pick them up nor remove them.

[Willelm]

My account got hacked last night. I had gotten a phishing email and clicked the link (I freaked out, it said my billing info had been changed. A moment of complete stupidity). I use Mozilla Firefox and have Noscript, adblock plus, WoT, Ghostery, and Flashblock. I bought AVG 9.0. I have Adaware, Spybot, and Malwarebytes. In so far as I know nothing was downloaded. I had put in my account info and password and was led to a "site is down for maintenance" page. For some reason (again, I was being stupid), I still went to the regular wow site, account management, logged in just fine, and when I saw my billing info was okay, just left (why didn't I just change my password?!). All two days before I ordered my authenticator.

Aside of, I really don't want to do a reformat. I've never done one, and I have games on this PC and I am not sure if I could reinstall them (such as CoD:MW2 and L4d2, as well as Sims3 and Dragon Age), and I don't really have the expenses to be paying someone to do it for me.

That aside, I ran a McAfee scan, came clean. Uninstalled that, bought AVG's full run, installed that, ran it, came up clean. I ran Spybot, Adaware, and then Malwarebytes, and then another AVG scan. Nothing has picked up anything! I don't know how Keyloggers work - would I have had to download something? I never had a problem with WoW crashing (a couple days after I clicked the link is when I got hacked), or randomly disconnecting me.

I also changed my battle.net email, to avoid this sort of thing in the future. I feel like an idiot, but I guess I learned my lesson.

I am just not sure if I should be trying to find a needle in a haystack. I had a friend go through certain files for me to see if anything was weird or out of place - nothing is. This desktop is pretty new, I only just got Internet back on it after maybe two weeks of playing with it, so there's really not much clutter. I don't really visit any unsecured websites. I also learned my lesson about phishing emails and how to check email headers. But would I have a keylogger? If so, how can I track it when I've used all those other things? I also used Process Scanner, and that too came up clean.

Any help would be appreciated, thanks.

[Cilraaz]

My account got hacked last night. I had gotten a phishing email and clicked the link (I freaked out, it said my billing info had been changed. A moment of complete stupidity). I use Mozilla Firefox and have Noscript, adblock plus, WoT, Ghostery, and Flashblock. I bought AVG 9.0. I have Adaware, Spybot, and Malwarebytes. In so far as I know nothing was downloaded. I had put in my account info and password and was led to a "site is down for maintenance" page. For some reason (again, I was being stupid), I still went to the regular wow site, account management, logged in just fine, and when I saw my billing info was okay, just left (why didn't I just change my password?!). All two days before I ordered my authenticator.

Aside of, I really don't want to do a reformat. I've never done one, and I have games on this PC and I am not sure if I could reinstall them (such as CoD:MW2 and L4d2, as well as Sims3 and Dragon Age), and I don't really have the expenses to be paying someone to do it for me.

That aside, I ran a McAfee scan, came clean. Uninstalled that, bought AVG's full run, installed that, ran it, came up clean. I ran Spybot, Adaware, and then Malwarebytes, and then another AVG scan. Nothing has picked up anything! I don't know how Keyloggers work - would I have had to download something? I never had a problem with WoW crashing (a couple days after I clicked the link is when I got hacked), or randomly disconnecting me.

I also changed my battle.net email, to avoid this sort of thing in the future. I feel like an idiot, but I guess I learned my lesson.

I am just not sure if I should be trying to find a needle in a haystack. I had a friend go through certain files for me to see if anything was weird or out of place - nothing is. This desktop is pretty new, I only just got Internet back on it after maybe two weeks of playing with it, so there's really not much clutter. I don't really visit any unsecured websites. I also learned my lesson about phishing emails and how to check email headers. But would I have a keylogger? If so, how can I track it when I've used all those other things? I also used Process Scanner, and that too came up clean.

Any help would be appreciated, thanks.

You weren't keylogged. You voluntarily entered your account information into a phishing website. That doesn't require any malicious software on your computer.

[mööh]

hello

after my wow account was keylogged yesterday (or hacked) i thought of cleaning my comp because i don't want it to happen again. So after i used CC cleaner i downloaded malware and it started to scan it it stated that C:\Windows\system32\SYSTEM32 is a trojan. So tell me is it a trojan and should i delete it?

[Cilraaz]

There's no reason that I know of that system32 should exist within the system32 folder. So I would be inclined to believe it's malware.

[Hezekiah]

I was hacked last night. I only go on the safe websites, mmo-champion/wow-heroes/real forums/wowwiki/wowhead. Someone added an authenticator to my account and sold all my stuff. I just ran malware bytes, kaspersky, avira, avg, but it found nothing. I never enter my account and password on any website, even the forums. So I'm thinking I was phished but I didn't enter my info anywhere.. any ideas?

[Resa]

Wow-heroes had bad ads a few weeks back. Probably got keylogged from that.

Try avast, and as a last resort, try asking bleepingcomputer.com 's forums.

[heav77]

hi all

i ended up here because im trying to find a solution for my problem,my mother language is dutch,not englisch so bear with me here.
i get hacked a lot lately (i play wow) and i suspect spyware on my pc since i dont download porn,klik on links i dont trust,i dont even browse alot,im a simple mom/housewife and proud owner off several lvl 80s leveled over the last years,i even run antivirus frequently (avast i use)
but this time they got me good,i normaly was able to interupt a hacker or notice it being done real quick so i could recover/change password.
this time however i had not logged in since last wednesday i think because i was to busy taking care of my husband who has cluster headache and had 1 attack after another for days.
they hacked me on friday,simply sold gear etc,then apparently to a real mail from blizz wich i thought was fake at first they tried selling stuff for rl money in trade wich got me a 3 hour ban and a pw reset with a link added to reset my pw only thats not working,if i press it i get ticket not found and 2 boxes to make a new pw,if i do it says error.
its sunday now so by now they had changed my secret question answer etc.
i know i can call blizz tommorow,wich i will and ill get my gear back etc,again but i want to find the spyware thats causing this so i can remove it.
i ran hitmanpro,results some kind of error page telling me it didnt run good with my current windows,i ran a trojanfinder,no results either,they found nothing.
im a pc noob,that at first so if someone thinks he can help me remember that pls,sorry for the wall of text i know some of you hate,i kept it as short as possible.

kind regards,a desperate wowplaying mom

[Ducon]

hi all

i ended up here because im trying to find a solution for my problem,my mother language is dutch,not englisch so bear with me here.
i get hacked a lot lately (i play wow) and i suspect spyware on my pc since i dont download porn,klik on links i dont trust,i dont even browse alot,im a simple mom/housewife and proud owner off several lvl 80s leveled over the last years,i even run antivirus frequently (avast i use)
but this time they got me good,i normaly was able to interupt a hacker or notice it being done real quick so i could recover/change password.
this time however i had not logged in since last wednesday i think because i was to busy taking care of my husband who has cluster headache and had 1 attack after another for days.
they hacked me on friday,simply sold gear etc,then apparently to a real mail from blizz wich i thought was fake at first they tried selling stuff for rl money in trade wich got me a 3 hour ban and a pw reset with a link added to reset my pw only thats not working,if i press it i get ticket not found and 2 boxes to make a new pw,if i do it says error.
its sunday now so by now they had changed my secret question answer etc.
i know i can call blizz tommorow,wich i will and ill get my gear back etc,again but i want to find the spyware thats causing this so i can remove it.
i ran hitmanpro,results some kind of error page telling me it didnt run good with my current windows,i ran a trojanfinder,no results either,they found nothing.
im a pc noob,that at first so if someone thinks he can help me remember that pls,sorry for the wall of text i know some of you hate,i kept it as short as possible.

kind regards,a desperate wowplaying mom

You might wanna try asking help f.e. here http://www.bleepingcomputer.com/forums/forum103.html

[haxartus]

Almost all antiviruses suck because they use mostly signature based detection. Which is really stupid. Most people get infected because they rely on their antivirus software to protect them from everything. If it's up to your antivirus to save you, you did something wrong.

[Cilraaz]

Almost all antiviruses suck because they use mostly signature based detection. Which is really stupid. Most people get infected because they rely on their antivirus software to protect them from everything. If it's up to your antivirus to save you, you did something wrong.

Unless you're intelligent and use an anti-virus or separate program with heuristic scanning. I agree, though, that people should not rely on something to protect them. Computer security should absolutely be proactive, not reactive.

[haxartus]

Unless you're intelligent and use an anti-virus or separate program with heuristic scanning. I agree, though, that people should not rely on something to protect them. Computer security should absolutely be proactive, not reactive.

Exactly the reason why i don't use antiviruses. I use other methods of protection, which rely entirely on my decisions. I can set rules for every process on my system with incredible details and accuracy. The rules include not only internet access, but local access, memory, other processes, registry and etc. And yes, everything is blocked by default. I have to allow it manually for a new processes.
Now, when I say that i don't use an antivirus, and my computer is almost immune to computer viruses, most of the people don't believe me.

[Cilraaz]

Exactly the reason why i don't use antiviruses. I use other methods of protection, which rely entirely on my decisions. I can set rules for every process on my system with incredible details and accuracy. The rules include not only internet access, but local access, memory, other processes, registry and etc. And yes, everything is blocked by default. I have to allow it manually for a new processes.
Now, when I say that i don't use an antivirus, and my computer is almost immune to computer viruses, most of the people don't believe me.

The only problem with a setup completely reliant on rulesets is that it's only as good as the user deciding on the rulesets. Not knowing your computer knowledge or computing habits, I can't make a reasonable judgement on the security of your system. Having no kind of failsafe to fall back on, should one of your rulesets be wrong or vulnerable, is kind of a strike against you though.

[haxartus]

That is the problem with this kind of protection. My computer knowledge is, let's say, a lot higher then average. But for other people it won't work so well. And some might find it too complicated, even if they understand how to make it work. But when it's working it can't be broken. Not without exploiting a 0-day vulnerability in the software that I'm using, and they have almost no way of knowing such information.
And also I don't think someone that good will target my system. The "dangerous hackers" that hack wow accounts can't even speak English.

[Deleted]

Thank you for ur valuble lesson, now maybe my 2nd acc wont get hacked :P

[Deleted]

Authenticator is still the best to prevent that