View Full Version : HELP!!! I think I accidently downloaded a keylogger!!!
Fendryx
16-06-2007, 08:24 PM
Some asshat posted a link to a website that said in the URL worldofwarcraft.com but when I hit the link it took me to a different website, and the people there were spamming the guy called him an asshat and keylogger and everythnig. Now im all worried that I have a key logger on my computer!
what should I do?????? Should I not log into WoW Until i am 100000% sure it is gone??
Any programs I should use to get rid or secure my computer?? PLEASE!!
(merge)
I think I may accidently downloaded a keylogger a few mintues ago when I clicked on some guys link that had worldofwarcraft.com in the URL. I need some help finding out if I really did!
Please, I need to know of any programs I can use to secure my computer, and If i do have a keylogger\trojan\etc what I can do to protect my account.
Thank you!
Herald of Doom
16-06-2007, 08:33 PM
Aight. First of all, avoid typing any passwords. Then check your processes and kill anything that looks funky. Then try determining which one it is by running all the antispyware programs you can find. Try automatically deleting the keylogger, if that fails google it and try to find out which files and dll you need to delete.
PS: I never had to remove a keylogger, but those seem like basic steps. Maybe someone with experience can comment :)
HoD
Fendryx
16-06-2007, 08:51 PM
What am I looking for in the processes? Any tags or anything I should be looking for?
All I have looked up is "PRONoMgr.exe", which according to what-is-exe.com is a file that came with your computer
Herald of Doom
16-06-2007, 09:00 PM
Nope, if you don't know which keylogger it can be anything (not stuff like spoolsv.exe and svchost.exe ofcourse). Try closing all applications and run antispyware, maybe it picks it up. However, not all keyloggers are that detectable. Did anyone mention which keylogger it was on the place where you picked it up?
HoD
Fendryx
16-06-2007, 09:01 PM
No they didnt, when I went to the site though, it was something about file hosting or something like that I think. (Im not going back to check)
Zendarin
16-06-2007, 09:23 PM
Run a full scan with your antivirus software. As long as your av software is up to date it should catch anything like that. If you are clean just reboot your PC to be safe and you should be fine.
Edit> btw if you clicked on the link that idiot posted here in the forums don't worry about it. It takes you to a fake EQ login page and captures your login information if you try to sign in there. As long as you don't try to sign in on that page you should be fine. Next time you go to any WOW website and sign in make sure the URL is www.worldofwarcraft.com
Fendryx
16-06-2007, 10:06 PM
Run a full scan with your antivirus software. As long as your av software is up to date it should catch anything like that. If you are clean just reboot your PC to be safe and you should be fine.
Edit> btw if you clicked on the link that idiot posted here in the forums don't worry about it. It takes you to a fake EQ login page and captures your login information if you try to sign in there. As long as you don't try to sign in on that page you should be fine. Next time you go to any WOW website and sign in make sure the URL is www.worldofwarcraft.com
Dude, I hope you are right because if you are I am going to be very happy :)
I did NOT try to click on anything there, I closed it right. I tried running my antivirus (the CA Security Pack) ran the anti-spyware and found nothing, then i tried downloading a different anti-spyware that they wanted me to buy, and it CLAIMS to have found a few files, but I found out that companies often make their trial clients to claim to have found 3 files, but i updated my CA and everything still with no luck.
Also, I have claimed my potential compromization to Blizzard.
So do you guys think its safe for me to log onto WoW?
Woodlander
16-06-2007, 10:15 PM
While I can't say that it's 100% safe to login you might be ok as long as a scan with your current antivirus shoed nothing and your firewall is up and running. This issue does make me wonder though, several banks are going to a "virtual keyboard" for logins as a way to defeat keyloggers. Not only does it eliminate the need for using the keyboard so sign on but some of them scramble the order of the numbers and letters on the keyboard so that you arent clicking on the same part of the gui each time.
Kalos
16-06-2007, 11:46 PM
Read the technical forum's stickies, it's right there at the top of this forum. Instructions on how to handle keyloggers and other infections. Please read the stickies.
memetootoo
17-06-2007, 01:32 AM
You have a couple more replies in the other post you made. Also the mods here do not like you posting the same thread more than once.
Genseric
17-06-2007, 01:57 AM
Use the on screen keyboard for anything important.
Fendryx
17-06-2007, 02:59 AM
onscreen keyboard? Where can i find this?
Kalos
17-06-2007, 03:16 AM
Under 'Accessories', 'Accessability'. It's a standard Windows function on every copy of the OS in the world, try exploring the basic features and folders, plenty of useful things to be found.
Valas Azuviir
17-06-2007, 12:13 PM
a) I've merged both your threads and taken to the section where the new one belongs imnsho.
b) Keep the following in mind:
2. Thou Shalt Not Spam or Engage in Posting Wars. Post it once, and post it nice, and please don't ever post it twice. (There's a song there somewhere.) Pick a forum, pick a message, and that's that. Don't post in every forum with the same message. If it's a general post, use one of our general forums. If it's specific to a class. well.. you follow the drift.
Source (http://wow.incgamers.com/forums/rules/).
c) Now onto the meat of this public service message.
Suggest you get the following three programs, all are freeware, but they're quite handy.
1) Ad-Aware SE personal (your basic spy- and malware checker)
2) Spybot Search&Destroy (more spyware killing, but also does some nice things with dns changes, you will have to turn off your anti-virus while running this though, you can turn it back on, once done.)
3) CC-cleaner. Allows you to get rid of all unneccessary temp files, where something could be lurking.
Last, but certainly not least. Go to Kasperky.com and have its online scanner do a complete sweep of your system. If, you come across something whack. Then do an online search as for the message kaspersky gives, you'll come across a number of websites that way, which tell you how to get rid of that particular problem.
vBulletin® v3.8.4, Copyright ©2000-2009, Jelsoft Enterprises Ltd.