1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Testing for Existence of Key-loggers and Truly Malicious Spyware

Discussion in 'Virus & Other Malware Removal' started by Alex Ethridge, Nov 10, 2003.

Thread Status:
Not open for further replies.
  1. Alex Ethridge

    Alex Ethridge Thread Starter

    Joined:
    Apr 10, 2000
    Messages:
    9,140
    I have a computer here that the owner suspects someone has installed a keylogger or something like that.

    How can one test for such a thing? I know that some of this type program are quite sophisticated and do not show up in any list of running programs.

    Running Windows 98 on a broadband connection.
     
  2. NiteHawk

    NiteHawk

    Joined:
    Mar 9, 2003
    Messages:
    4,699
    Run HJT and look at the running processes in the top third of the log. Hopefully that will give you an indicator.

    Also, use the Find command and on the Date tab look for all files in the last two or three weeks. You can probably narrow it down to a txt or html file that seems to be growing. Many logger's report files use a txt or html format to transmit their reports back to the snoop.

    I think with your experience you can tell which files to disregard and which deserve a second look. Also remember to check the file's properties for description and company name. These can be helpful.

    Also check the email client sent folder and see if there are any mailings the user isn't aware of. However, most of these include their own SMTP engine so that may not help much.

    Any idea of how long this has been going on? Again use the find command and scan for *.exe and *.com that have been installed in the last few months. The actual file date may be old, but the folder creation date should offer some help.
     
As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/178551

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice