Possible fraud/Keylogger help plz.....

Just post the main event Window, or a link to a image hosting site, which shows all the processes etc running.

Why create another thread though when you are already are getting some very good advice in the one you have linked above..?

I actually managed to stop a keylogger / or whatever type thingy on my PC as it was picked up only by my firewall when something unknown tried to connect to the Internet and upload 8 pages of a text document it had generated of every username and password that I had used on my PC..!

Scary stuff for sure.
 
Last edited:
Process Explorer:

Process1.jpg


Process2.jpg


Process3.jpg


Autoruns to follow.
 
Just to add if you look in the event Window of PE and right click on any of the processes you can then look it up (search online) on the Internet on what it is and whether it should be running.
 
.....ah no need to be sorry :)

I did not notice that it was in the GD section, they are a peculiar bunch in there :D
 
Things that look a bit suspicious to me:

process1x.jpg

autoruns93.png

autoruns3b.png


Also, did you run this as administrator? I find it strange that a lot of your system processes aren't labelled as published from Microsoft.
 
Burnsy2023 said:
Also, did you run this as administrator? I find it strange that a lot of your system processes aren't labelled as published from Microsoft.
Click to expand...

Thanks mate, will do some checking on those.

I'm logged on as administrator but did not run the exe using "Run as administrator".
 
mrbell1984 said:
Most people don't know what processes are doing what, plus little nasties can be hidden. To be on the safe side format is sometimes the only way. That system looks a mess with the amount of startup items e.t.c......;)
Click to expand...

This is somewhat the orthodoxy when it comes to malware, but I disagree. If you can use the sysinternals tools properly, you can always find malware.
 
You must log in or register to reply here.
Back
Top Bottom