keylogger/trojan hijackers on my PC???

Discussion in 'Windows - Virus and spyware problems' started by rjohn, May 16, 2008.

  1. rjohn

    rjohn Member

    Joined:
    May 16, 2008
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    11
    Hi everyone,i would be grateful for any help you can give me.Please bear in mind,im no good with the computer and anything you ask me to do/info to give to you,will have to be explained basically as i know nothing.
    O.K-here is whats happening.
    when signing into paypal i am being re-directed to a page which is asking me for all my security/bank and pin codes.I have used spybot and trojan remover 6.6.9.I have nortons(which is junk)and nothing shows on any of them.
    I need a step by step guide in getting rid of this annoying problem.any help would be much appreciated.please bear in mind,i know nothing about pc-so please keep it basic for me.
    Thanks.
     
    rjohn, May 16, 2008
    #1
  2. echoreply

    echoreply Regular member

    Joined:
    Nov 9, 2007
    Messages:
    472
    Likes Received:
    0
    Trophy Points:
    26
    hi,

    a hjt log as a reference point would help. the log may or may not show malware, its only a starting point.

    download HJTInstall.exe:
    http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

    * Save HJTInstall.exe to your desktop.
    * Doubleclick on the HJTInstall.exe icon on your desktop.
    * By default it will install to C:\Program Files\Trend Micro\HijackThis .
    * Click on Install.
    * It will create a HijackThis icon on the desktop.
    * Once installed, it will launch Hijackthis.
    * Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
    * Click on "Edit > Select All" then click on "Edit > Copy" and Paste the entire contents of the log in your next reply.
     
    echoreply, May 24, 2008
    #2
  3. ATS

    ATS Guest

    Last edited by a moderator: May 27, 2008
    ATS, May 27, 2008
    #3
  4. cdavfrew

    cdavfrew Regular member

    Joined:
    May 19, 2008
    Messages:
    1,183
    Likes Received:
    0
    Trophy Points:
    46
    Yes, a hijack this log will help. However, I also suspect a hosts file problem. You can either use hijack this log to open the hosts file, or navigate to C:\Windows\system32\drivers\etc and open the hosts file in notepad. Please post the contents here, and do not delete anything, nor be suspicious of the amount of entries you have, as Spybot also creates hosts entries. Also, can you possibly rule out a DNS\ISP problem?

    However, when downloading hijack this, rename the hijack this file to something like "scannerhjt.exe" as certain variants of vundo can avoid the hijack this process when named as hijack this.

    Also, if you wish to know if your computer is infected, you can download one of the better scanners such as Antivir or A-squared and scan with them in safe mode. Please do not remove anything, as it could be a false positive, but rather, post it here.

    Best regards :D
     
    cdavfrew, May 27, 2008
    #4

Share This Page