Re: Hacker or Keylogger. Which one?

Dear David,

Thank you for responding.

No, I'm not an expert, but my spyware program told me I had a toolbar
hijacker which came in through "Viewpoint." I also have tracking cookies
from Data Miner. Some are doubleclick, mediaplex, atdmt, advertising, and
something under HKEY_USERS:s-1-5-2-18871... (2 entries). Spybot knocked out
something and after whatever it was it took out a box appeared on my screen
that said "Legal Stuff." If you remove this some of your programs may not
work properly...see your user agreement. I believe this was through my dial-
up with PeoplePC, because I did a system restore and loaded PeoplePC again
and all that stuff was back on HKEY_USERS:s-1-5 etc.

I'm not an expert and I got rid of all the spyware on my old computer, even
though a computer expert told me it would be like trying to perform an
appendectomy with a butter knife. I did it (took two months) and my computer
was fine, but I bought another. Now it's happening all over again.

Why are people allowed to add things to the registry and put them in lockdown,
and why are people able to hijack a toolbar? Shouldn't our spyware, adware
and firewall protect us from this?

Thanks again, David.

I'll try your suggestion.




David H. Lipman wrote:
>From: "Blue Bonnet 777 via WindowsKB.com" <u17044@uwe>
>
>| I have peoplepc online with a dial-up connection and Windows XP. Every time
>| I hit a key there is a clicking sound, like when you take a picture with a
>[quoted text clipped - 12 lines]
>| I know it's either a hacker or keylogger, but how do I get rid of this
>| without reformatting my hard drive?
>
>And you are an expert ? That is how you know it is a Hacker or a Keylogger ?
>
>If it was tuly either, the software would NOT indicate its presence for fear off detection
>and removal.
>
>To be sure, you can use the following Multi AV Scanning Tool...
>
>Download MULTI_AV.EXE from the URL --
>http://www.ik-cs.com/programs/virtools/Multi_AV.exe
>
>To use this utility, perform the following...
>Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
>Choose; Unzip
>Choose; Close
>
>Execute; C:\AV-CLS\StartMenu.BAT
>{ or Double-click on 'Start Menu' in C:\AV-CLS }
>
>NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
>FireWall to allow it to download the needed AV vendor related files.
>
>C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
>This will bring up the initial menu of choices and should be executed in Normal Mode.
>This way all the components can be downloaded from each AV vendor's web site.
>The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.
>
>You can choose to go to each menu item and just download the needed files or you can
>download the files and perform a scan in Normal Mode. Once you have downloaded the files
>needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
>during boot] and re-run the menu again and choose which scanner you want to run in Safe
>Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.
>
>When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
>file. http://www.ik-cs.com/multi-av.htm
>
>* * * Please report back your results * * *
>

--
"Truth, like light, is often slanted."....c2005

Message posted via WindowsKB.com
http://www.windowskb.com/Uwe/Forums.aspx/windowsxp/200601/1
.