Register for your free account! | Forgot your password?

Go Back   elitepvpers > Off-Topics > Technical Support
Keylogger Problem :< Keylogger Problem :<
You last visited: Today at 04:37

  • Please register to post and access all features, it's quick, easy and FREE!

Advertisement


Advertise with us!

Keylogger Problem :<

Discussion on Keylogger Problem :< within the Technical Support forum part of the Off-Topics category.

Reply
Page 1 of 4 1 23 Last »
 
Old   #1
 
IncenD-RaveN's Avatar
 
elite*gold: 0
The Black Market: 18/0/1
Join Date: Sep 2005
Posts: 5,077
Received Thanks: 419
Ich habe ein Problem. Ich habe warscheinlich nen Keylogger aufm Computer.

Nun ich habe AntiVir XP Adaware und Spybot SnD. Alle finden nichts...

Was kann ich noch testen?

Schnelle hilfe benötigt.

mfg
IncenD-RaveN is offline  
Old 01/22/2007, 18:11   #2
 
elite*gold: 0
The Black Market: 0/0/0
Join Date: Apr 2006
Posts: 869
Received Thanks: 23
sys wiederherstellen /komplett formatieren .. wenns ein böser ist:P
Sphare is offline  
Old 01/22/2007, 18:12   #3
 
elite*gold: 0
The Black Market: 0/0/0
Join Date: Aug 2005
Posts: 2,536
Received Thanks: 269
frage...wie kommst du darauf?
xaladin is offline  
Old 01/22/2007, 18:15   #4
 
IncenD-RaveN's Avatar
 
elite*gold: 0
The Black Market: 18/0/1
Join Date: Sep 2005
Posts: 5,077
Received Thanks: 419
Weil meine PW der WoW Accs immer geändert werden? :P

<3 auch dich Xtreme ^^

Sys wiederherstellen / formatieren ungern. :/
IncenD-RaveN is offline  
Old 01/22/2007, 18:27   #5
 
elite*gold: 0
The Black Market: 0/0/0
Join Date: Apr 2006
Posts: 869
Received Thanks: 23
ok.. hetzt musste genau überlegen was du in der letzte woche gedownt hast..
alles nachforschen / löschen. des is die einzige möglichkeit.. jaa so ein keylogger is echt fies :x
Sphare is offline  
Old 01/22/2007, 18:30   #6
 
IncenD-RaveN's Avatar
 
elite*gold: 0
The Black Market: 18/0/1
Join Date: Sep 2005
Posts: 5,077
Received Thanks: 419
Gibts da nicht gute proggis welche zu empfehlen sind?
IncenD-RaveN is offline  
Old 01/22/2007, 18:32   #7
 
elite*gold: 0
The Black Market: 0/0/0
Join Date: May 2005
Posts: 255
Received Thanks: 3
evtl. mal task manager erstma nachgucken ob da n ungewöhnlicher prozess läuft
leg0las is offline  
Old 01/22/2007, 18:37   #8
 
IncenD-RaveN's Avatar
 
elite*gold: 0
The Black Market: 18/0/1
Join Date: Sep 2005
Posts: 5,077
Received Thanks: 419
Damit kenne ich mich nicht aus.

Wenn ich ihn öffnen will steht da :

" Der Taskmanager wurde durch den Administrator deaktiviert " Oo omg :/

Hab grad Panda installiert, mal sehen ob der was findet.
IncenD-RaveN is offline  
Old 01/22/2007, 18:40   #9
 
Hybrid's Avatar
 
elite*gold: 0
The Black Market: 0/0/0
Join Date: Feb 2006
Posts: 928
Received Thanks: 25
Erlaeutere mal welche Art von Benutzer Konto du auf deinem Computer benutzt.
(anscheinend arg eingeschraenkt)

mfg Hybrid

EDIT:
Hybrid is offline  
Old 01/22/2007, 18:49   #10
 
IncenD-RaveN's Avatar
 
elite*gold: 0
The Black Market: 18/0/1
Join Date: Sep 2005
Posts: 5,077
Received Thanks: 419
Ich bin Administrator...

Hab nur das eine Benutzerkonto aufm PC.

Also panda hat 91 datein welche infiziert waren, berichtigt.

Mal sehen was nun passiert ;D
IncenD-RaveN is offline  
Old 01/22/2007, 19:02   #11


 
S.A.L.O.M.O.N.'s Avatar
 
elite*gold: 1406
The Black Market: 150/0/0
Join Date: May 2005
Posts: 23,919
Received Thanks: 15,126
start---> ausführen-.-->msconfig---> nachguggn ob irgendwas komisches mitstartet , dann nach der exe googlen dann schauen was gefährlich sein könnte
S.A.L.O.M.O.N. is offline  
Old 01/22/2007, 19:18   #12
 
IncenD-RaveN's Avatar
 
elite*gold: 0
The Black Market: 18/0/1
Join Date: Sep 2005
Posts: 5,077
Received Thanks: 419



scvhost.exe

Not Running

High

hmm?
IncenD-RaveN is offline  
Old 01/22/2007, 19:20   #13
 
elite*gold: 42
The Black Market: 24/0/0
Join Date: Oct 2005
Posts: 11,493
Received Thanks: 2,724
Hol dir ma Security Taskmanager
Spybot
Adaware
Hijack this

Hijack this bitte log posten.
Müsste reichen, Sacrum
Ghost is offline  
Old 01/22/2007, 19:22   #14
 
IncenD-RaveN's Avatar
 
elite*gold: 0
The Black Market: 18/0/1
Join Date: Sep 2005
Posts: 5,077
Received Thanks: 419
Spybot und Adaware bereits durchlaufen lassen.

Quote:
Logfile of HijackThis v1.99.1
Scan saved at 19:20:57, on 22.01.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:&#092;WINDOWS&#092;System32&#092;smss.exe
C:&#092;WINDOWS&#092;system32&#092;csrss.exe
C:&#092;WINDOWS&#092;system32&#092;winlogon.exe
C:&#092;WINDOWS&#092;system32&#092;services.exe
C:&#092;WINDOWS&#092;system32&#092;lsass.exe
C:&#092;WINDOWS&#092;system32&#092;svchost.exe
C:&#092;WINDOWS&#092;system32&#092;svchost.exe
C:&#092;Programme&#092;TuneUpUtilities2006&#092;Wi nStylerThemeSvc.exe
C:&#092;Programme&#092;Panda Software&#092;Panda Antivirus 2007&#092;pavsrv51.exe
C:&#092;Programme&#092;Panda Software&#092;Panda Antivirus 2007&#092;AVENGINE.EXE
C:&#092;WINDOWS&#092;System32&#092;svchost.exe
C:&#092;WINDOWS&#092;system32&#092;svchost.exe
C:&#092;WINDOWS&#092;system32&#092;svchost.exe
C:&#092;WINDOWS&#092;Explorer.exe
C:&#092;WINDOWS&#092;system32&#092;spoolsv.exe
C:&#092;Programme&#092;Panda Software&#092;Panda Antivirus 2007&#092;PsImSvc.exe
C:&#092;WINDOWS&#092;system32&#092;svchost.exe
C:&#092;WINDOWS&#092;system32&#092;wdfmgr.exe
C:&#092;Programme&#092;Panda Software&#092;Panda Antivirus 2007&#092;PsCtrls.exe
C:&#092;Programme&#092;Java&#092;jre1.5.0_10&#092; bin&#092;jusched.exe
C:&#092;Programme&#092;CyberLink&#092;PowerDVD&#09 2;PDVDServ.exe
C:&#092;Programme&#092;Winamp&#092;winampa.exe
C:&#092;WINDOWS&#092;System32&#092;spool&#092;DRIV ERS&#092;W32X86&#092;3&#092;E_FATIADE.EXE
C:&#092;Programme&#092;internet explorer&#092;iexplore.exe
C:&#092;WINDOWS&#092;system32&#092;devldr32.exe
C:&#092;WINDOWS&#092;system32&#092;RUNDLL32.EXE
C:&#092;Programme&#092;QuickTime&#092;qttask.exe
C:&#092;Programme&#092;Panda Software&#092;Panda Antivirus 2007&#092;APVXDWIN.EXE
C:&#092;WINDOWS&#092;system32&#092;ctfmon.exe
C:&#092;WINDOWS&#092;System32&#092;svchost.exe
C:&#092;Programme&#092;Skype&#092;Phone&#092;Skype .exe
C:&#092;Programme&#092;Xfire&#092;xfire.exe
c:&#092;programme&#092;panda software&#092;panda antivirus 2007&#092;WebProxy.exe
C:&#092;Programme&#092;QIP&#092;qip.exe
C:&#092;WINDOWS&#092;system32&#092;wuauclt.exe
C:&#092;WINDOWS&#092;system32&#092;wscntfy.exe
C:&#092;Programme&#092;QIP&#092;qip.exe
C:&#092;Programme&#092;Mozilla Firefox&#092;firefox.exe
C:&#092;World of Warcraft&#092;WoW.exe
C:&#092;PROGRA~1&#092;FREEDO~1&#092;fdm.exe
C:&#092;Programme&#092;Panda Software&#092;Panda Antivirus 2007&#092;psimreal.exe
C:&#092;Dokumente und Einstellungen&#092;Administrator&#092;Desktop&#092 ;HijackThis.exe

F2 - REG:system.ini: Shell=Explorer.exe C:&#092;WINDOWS&#092;system32&#092;scvhost.exe
F3 - REG:win.ini: run=C:&#092;WINDOWS&#092;system32&#092;scvhost.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:&#092;Programme&#092;Adobe&#092;Acrobat 7.0&#092;ActiveX&#092;AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:&#092;Programme&#092;Spybot - Search & Destroy&#092;SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:&#092;Programme&#092;Java&#092;jre1.5.0_10&#092; bin&#092;ssv.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:&#092;Programme&#092;Free Download Manager&#092;iefdmcks.dll
O2 - BHO: (no name) - {E14DCE67-8FB7-4721-8149-179BAA4D792C} - (no file)
O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:&#092;Programme&#092;FlashFXP&#092;IEFlash.dll
O4 - HKLM&#092;..&#092;Run: [ICQ Lite] "C:&#092;Programme&#092;ICQLite&#092;ICQLite.e xe" -minimize
O4 - HKLM&#092;..&#092;Run: [SunJavaUpdateSched] "C:&#092;Programme&#092;Java&#092;jre1.5.0_10&#092 ;bin&#092;jusched.exe"
O4 - HKLM&#092;..&#092;Run: [RemoteControl] C:&#092;Programme&#092;CyberLink&#092;PowerDVD&#09 2;PDVDServ.exe
O4 - HKLM&#092;..&#092;Run: [WinampAgent] C:&#092;Programme&#092;Winamp&#092;winampa.exe
O4 - HKLM&#092;..&#092;Run: [EPSON Stylus DX4800 Series] C:&#092;WINDOWS&#092;System32&#092;spool&#092;DRIV ERS&#092;W32X86&#092;3&#092;E_FATIADE.EXE /P26 "EPSON Stylus DX4800 Series" /O6 "USB001" /M "Stylus DX4800"
O4 - HKLM&#092;..&#092;Run: [KernelFaultCheck] %systemroot%&#092;system32&#092;dumprep 0 -k
O4 - HKLM&#092;..&#092;Run: [NvCplDaemon] RUNDLL32.EXE C:&#092;WINDOWS&#092;system32&#092;NvCpl.dll,NvSta rtup
O4 - HKLM&#092;..&#092;Run: [nwiz] nwiz.exe /install
O4 - HKLM&#092;..&#092;Run: [NvMediaCenter] RUNDLL32.EXE C:&#092;WINDOWS&#092;system32&#092;NvMcTray.dll,Nv TaskbarInit
O4 - HKLM&#092;..&#092;Run: [QuickTime Task] "C:&#092;Programme&#092;QuickTime&#092;qttask. exe" -atboottime
O4 - HKLM&#092;..&#092;Run: [Adobe Photo Downloader] "C:&#092;Programme&#092;Adobe&#092;Photoshop Album Starter Edition&#092;3.0&#092;Apps&#092;apdproxy.exe"
O4 - HKLM&#092;..&#092;Run: [APVXDWIN] "C:&#092;Programme&#092;Panda Software&#092;Panda Antivirus 2007&#092;APVXDWIN.EXE" /s
O4 - HKCU&#092;..&#092;Run: [CTFMON.EXE] C:&#092;WINDOWS&#092;system32&#092;ctfmon.exe
O4 - HKCU&#092;..&#092;Run: [Skype] "C:&#092;Programme&#092;Skype&#092;Phone&#092;Skyp e.exe" /nosplash /minimized
O4 - HKCU&#092;..&#092;Run: [MsnMsgr] "C:&#092;Programme&#092;MSN Messenger&#092;MsnMsgr.Exe" /background
O4 - HKCU&#092;..&#092;Run: [Free Download Manager] C:&#092;Programme&#092;Free Download Manager&#092;fdm.exe -autorun
O4 - HKCU&#092;..&#092;RunOnce: [ICQ Lite] C:&#092;Programme&#092;ICQLite&#092;ICQLite.exe -trayboot
O4 - Startup: Xfire.lnk = C:&#092;Programme&#092;Xfire&#092;xfire.exe
O4 - Global Startup: Adobe Reader - Schnellstart.lnk = C:&#092;Programme&#092;Adobe&#092;Acrobat 7.0&#092;Reader&#092;reader_sl.exe
O4 - Global Startup: Verknüpfung mit World of Warcraft.lnk = C:&#092;World of Warcraft&#092;Launcher.exe
O8 - Extra context menu item: Download all with Free Download Manager - file://C:&#092;Programme&#092;Free Download Manager&#092;dlall.htm
O8 - Extra context menu item: Download selected with Free Download Manager - file://C:&#092;Programme&#092;Free Download Manager&#092;dlselected.htm
O8 - Extra context menu item: Download with Free Download Manager - file://C:&#092;Programme&#092;Free Download Manager&#092;dllink.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:&#092;Programme&#092;Java&#092;jre1.5.0_10&#092; bin&#092;ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:&#092;Programme&#092;Java&#092;jre1.5.0_10&#092; bin&#092;ssv.dll
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:&#092;Programme&#092;ICQLite&#092;ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:&#092;Programme&#092;ICQLite&#092;ICQLite.exe
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:&#092;PROGRA~1&#092;MSNMES~1&#092;msgrapp.d ll" (file missing)
O20 - Winlogon Notify: avldr - C:&#092;WINDOWS&#092;SYSTEM32&#092;avldr.dll
O23 - Service: Panda Software Controller - Panda Software International - C:&#092;Programme&#092;Panda Software&#092;Panda Antivirus 2007&#092;PsCtrls.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software International - C:&#092;Programme&#092;Panda Software&#092;Panda Antivirus 2007&#092;pavsrv51.exe
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software International - C:&#092;Programme&#092;Panda Software&#092;Panda Antivirus 2007&#092;PsImSvc.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:&#092;Programme&#092;TuneUpUtilities2006&#092;Wi nStylerThemeSvc.exe
IncenD-RaveN is offline  
Old 01/22/2007, 19:39   #15
 
elite*gold: 42
The Black Market: 24/0/0
Join Date: Oct 2005
Posts: 11,493
Received Thanks: 2,724
F2 - REG:system.ini: Shell=Explorer.exe C:&#092;WINDOWS&#092;system32&#092;scvhost.exe
F3 - REG:win.ini: run=C:&#092;WINDOWS&#092;system32&#092;scvhost.exe
BÖSE! Raus damit! Rest edite ich. Svchost hat nix in system32 zu suchen/Keylogger!

O2 - BHO: (no name) - {E14DCE67-8FB7-4721-8149-179BAA4D792C} - (no file) deutet auf
wsock32.sys - Troj/Ciadoor-M, hin

So Junge hast dir wohl Cia 1.3 eingefangen. Format C, bekommste kaum full runter. Hab damit paar mal hantiert, ist affig das Teil.
Ghost is offline  
Reply
Page 1 of 4 1 23 Last »

« Microsoft Live Messenger Modden | Frage -> CS 1.6 Server hosten? »

Similar Threads Similar Threads
Keylogger?
12/05/2009 - Ragnarok Online - 2 Replies
Hey ich suche einen Keylogger den ich jemandem schicken kann in einer imagedatei versteckt und ich dann zb das passwort von dem Ragnarok Account habe... Hat jemand eine Ahnung wie das geht oder funzt? Vielen Dank Eure minq
SM containing Keylogger?
05/23/2007 - Silkroad Online - 7 Replies
hi, my guild recently just told me that SM is containing a keylogger and that i should not use, is this true?



All times are GMT +1. The time now is 04:38.

elitepvpers - play less, get more - Top

Powered by vBulletin®
Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.
SEO by vBSEO ©2011, Crawlability, Inc.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Support | Contact Us | FAQ | Advertising | Privacy Policy | Terms of Service | Abuse
Copyright ©2025 elitepvpers All Rights Reserved.