need help asap ;)

[andylam]

hey guys i am new and not sure what thread this would fit in but i picked this one Xd tell me if i am wrong ok so i have a issues with my pc. Right now my pc is being keylogged (rin) and this keylogger can block a lot of things like sht down the computer, cmd, task manger, c drive, and folders i was able to get back task manger and cmd but i couldnt find the process on task manger. Just today i denied access to my c drive
-___- ... so i need to get that back :\ i have tried many scan and none are work and the i deleted the keylogger off of my desktop. So any ideas ?

 

[Dngrsone]

Your best bet would be to format the computer and reinstall your operating system.

Prior to that, you could use a bootable Linux CD like Ubuntu to access your hard drive copy over data to a backup drive (or burn to CD). Be sure the data you are backing up is not malware, or you will end up with the same problem over again.

 

[andylam]

i am trying to find a way around that XD i dont know how to do it and think i will mess it up even more D:

 

[Dngrsone]

Okay, there are several antimalware programs available to you. A friend of mine swears by malwarebytes.

Here, I will steal one of his posts:

Please do not run any registry cleaners/scanners besides ccleaner. What programs did you use to scan for malware? If you didn't use malwarebytes, please do so now. Even if you did, please post both logs of malwarebytes and hijackthis.

Please download Malwarebytes' Anti-Malware from here or here and save it to your desktop.

• Double-click mbam-setup.exe and follow the prompts to install the program.
• At the end, be sure a checkmark is placed next to
  • Update Malwarebytes' Anti-Malware
  • and Launch Malwarebytes' Anti-Malware
• then click Finish.
• If an update is found, it will download and install the latest version. Please keep updating until it says you have the latest version.
• Once the program has loaded, select Perform quick scan, then click Scan.
• When the scan is complete, click OK, then Show Results to view the results.
• Be sure that everything is checked, and click Remove Selected.
• A log will be saved automatically which you can access by clicking on the Logs tab within Malwarebytes' Anti-Malware

If for some reason Malwarebytes will not install or run please download and run Rkill.scr, Rkill.exe, or Rkill.com. If you are still having issues running rkill then try downloading these renamed versions of the same program.

EXPLORER.EXE
IEXPLORE.EXE
USERINIT.EXE
WINLOGON.EXE

But DO NOT reboot the system and then try installing or running Malwarebytes. If Rkill (which is a black box) appears and then disappears right away or you get a message saying rkill is infected, keep trying to run rkill until it over powers the infection and temporarily kills it. Once a log appears on the screen, you can try running malwarebytes or downloading other programs.



Download the HijackThis installer from here.
Run the installer and choose Install, indicating that you accept the licence agreement. The installer will place a shortcut on your desktop and launch HijackThis.

Click Do a system scan and save a logfile

Most of what HijackThis lists will be harmless or even essential, don't fix anything yet.

When the hijackthis log appears in a notepad file, click on the edit menu, click select all, then click on the edit menu again and click on copy. Come back to your reply and right click on your mouse and click on paste.

Post the logfile that HijackThis produces along with the Malwarebytes Anti-Malware log

 

[Indigo]

Ouch. In the age of all these great tools, recommending a format/reload is the cheap way out.

Give ComboFix a try first, before you go nuke-happy on the system. I sincerely doubt Malware Bytes will get completely rid of the issues. ComboFix is like a tactical nuke in a can for Windows PCs. It's fixed things for me I normally WOULD reload for, just as in this case. If it doesn't work, then Dngrsone's recommendation on the reload is legit.