Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works

Coachwife Help! Keyloggers back with a vengeance

  • Please log in to reply




  • Member
  • PipPip
  • 34 posts
Hi CoachWife or whoever is reading this,

I am so discouraged. I need an opinion on whether or not I need to take this to a PC doctor for surgery.

I sort of had a feeling they weren't entirely gone. Things just didn't "feel right," KWIM? Anyhow, I had decided I was going to buy Ewido and when I pushed that buy button the day it flashed up it's warning, Sygate started blocking access to everything and I couldn't get it to respond to any of my commands.

I did a complete re-install. As soon as I got done I opened up the C drive and took a look at the hidden files and sure enough, there were some that had dates from the day before. There were also the same users listed under the services in the administrators file. My security log also showed an anonymous logon. There is more but that should be enough so you get the picture.

What shoud I do? So far I been able to stay on line long enough to get any windows updates done. I can get to my daughter's house where I'll have another PC to work with if that would help.

I'll be back in a bit to post a HJT log. I'm trying a program called unhacked and I think it might be working since I've been able to write this shole post with out getting shut down! HA! But I have to log off to stop it.


Logfile of HijackThis v1.99.1
Scan saved at 7:20:49 AM, on 8/24/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\Program Files\Sygate\SPF\smc.exe
C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mm_tray.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\Program Files\hijackthis.exe

O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.micros...b?1124853324546
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe

Edited by BairbreJ, 24 August 2005 - 06:38 AM.

  • 0


Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP