Please help me with a keylogger!

Please help me with a keylogger!

Secure Home | Search | About
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Please help me with a keylogger! Gabriel South 12-03-2005
Posted by Gabriel South on December 3, 2005, 1:03 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi!

My computer have a keylogger installed that appears because the registration
window of it was showed today. The name of the software is ARDAMAX
keylogger.

A dont know how to remove it!... can you help me please?....

How can i activate/desactivate every program that executes when windows
start up?... (I have not found it with "msconfig"...)

Thaxs...




Posted by =?Utf-8?B?UGFuZGFfbWFu?= on December 3, 2005, 3:36 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Download :

@        Ad-Aware SE Personal
http://www.lavasoftusa.com/software/adaware


@        Microsoft Antispyware (only for genuie /legal Windows versions)
http://www.microsoft.com/athome/security/downloads/default.mspx


@        CWShredder        
http://housecall.trendmicro.com


@ SpyBot Search and Destroy
http://www.safer-networking.org/microsoft.en.html


Install them ,update them via intenet and then perform a full system scan.
Scan in Normal and then in Safe Mode.
Don't forget about disabling/enabling System Restore after that.

More detailed instrctions how to fight that malware can be found in that
file ,written by me:
http://free.hit.bg/fightmalware/malware%20remove.doc

( Because of the fact the provided file is DOCument,you need Office Pack
to open and view it.
If you don't have Microsoft Office ,Open Office or another ,you should
download
Microsoft Word viewer (free)

For XP and 2000

Office Word viewer 2003
http://www.microsoft.com/downloads/details.aspx?FamilyId=95E24C87-8732-48D5-8689-AB826E7B8FDF&displaylang=en

For 95 , 98 and Me
Office Word viewer 95
http://www.microsoft.com/downloads/details.aspx?FamilyID=a8e0c6ee-d736-4fd6-8a78-adaa6488b2ac&displaylang=en
)


It is advisable to change all your intenet password (email passwords or
other account passwords)


If you have any other questions ,do not hesitate to contact the community
again !


Panda_man
" Let's beat malware black and blue "
" Panda TruPrevent - the most intelligent technology to combat unknown
malware "




"Gabriel South" wrote:

> Hi!
>
> My computer have a keylogger installed that appears because the registration
> window of it was showed today. The name of the software is ARDAMAX
> keylogger.
>
> A dont know how to remove it!... can you help me please?....
>
> How can i activate/desactivate every program that executes when windows
> start up?... (I have not found it with "msconfig"...)
>
> Thaxs...
>
>
>
>

Posted by =?Utf-8?B?UGFuZGFfbWFu?= on December 3, 2005, 3:46 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
The software I offered should help you .
You can also have a deep look at my file :)

By the way ,if you would like more info about your malware ,click here :
http://securityresponse.symantec.com/avcenter/venc/data/spyware.ardakey.html


Bye

Panda_man
" Let's beat malware black and blue "
" Panda TruPrevent - the most intelligent technology to combat unknown
malware "




"Panda_man" wrote:

> Download :
>
> @        Ad-Aware SE Personal
> http://www.lavasoftusa.com/software/adaware
>
>
> @        Microsoft Antispyware (only for genuie /legal Windows versions)
> http://www.microsoft.com/athome/security/downloads/default.mspx
>
>
> @        CWShredder        
> http://housecall.trendmicro.com
>
>
> @ SpyBot Search and Destroy
> http://www.safer-networking.org/microsoft.en.html
>
>
> Install them ,update them via intenet and then perform a full system scan.
> Scan in Normal and then in Safe Mode.
> Don't forget about disabling/enabling System Restore after that.
>
> More detailed instrctions how to fight that malware can be found in that
> file ,written by me:
> http://free.hit.bg/fightmalware/malware%20remove.doc
>
> ( Because of the fact the provided file is DOCument,you need Office Pack
> to open and view it.
> If you don't have Microsoft Office ,Open Office or another ,you should
> download
> Microsoft Word viewer (free)
>
> For XP and 2000
>
> Office Word viewer 2003
>
http://www.microsoft.com/downloads/details.aspx?FamilyId=95E24C87-8732-48D5-8689-AB826E7B8FDF&displaylang=en
>
> For 95 , 98 and Me
> Office Word viewer 95
>
http://www.microsoft.com/downloads/details.aspx?FamilyID=a8e0c6ee-d736-4fd6-8a78-adaa6488b2ac&displaylang=en
)

>
>
> It is advisable to change all your intenet password (email passwords or
> other account passwords)
>
>
> If you have any other questions ,do not hesitate to contact the community
> again !
>
>
> Panda_man
> " Let's beat malware black and blue "
> " Panda TruPrevent - the most intelligent technology to combat unknown
> malware "
>
>
>
>
> "Gabriel South" wrote:
>
> > Hi!
> >
> > My computer have a keylogger installed that appears because the registration
> > window of it was showed today. The name of the software is ARDAMAX
> > keylogger.
> >
> > A dont know how to remove it!... can you help me please?....
> >
> > How can i activate/desactivate every program that executes when windows
> > start up?... (I have not found it with "msconfig"...)
> >
> > Thaxs...
> >
> >
> >
> >

Posted by Galen on December 4, 2005, 5:21 am
If you were  Registered and logged in, you could reply and use other advanced thread options

My reply is at the bottom of your sent message:

> The software I offered should help you .
> You can also have a deep look at my file :)
>
> By the way ,if you would like more info about your malware ,click
> here :
> http://securityresponse.symantec.com/avcenter/venc/data/spyware.ardakey.html
>
>
> Bye
>
> Panda_man
> " Let's beat malware black and blue "
> " Panda TruPrevent - the most intelligent technology to combat unknown
> malware "
>
>
>
>
> "Panda_man" wrote:
>
>> Download :
>>
>> @ Ad-Aware SE Personal
>> http://www.lavasoftusa.com/software/adaware
>>
>>
>> @ Microsoft Antispyware (only for genuie /legal Windows
>> versions)
>> http://www.microsoft.com/athome/security/downloads/default.mspx
>>
>>
>> @ CWShredder
>> http://housecall.trendmicro.com
>>
>>
>> @ SpyBot Search and Destroy
>> http://www.safer-networking.org/microsoft.en.html
>>
>>
>> Install them ,update them via intenet and then perform a full system
>> scan.
>> Scan in Normal and then in Safe Mode.
>> Don't forget about disabling/enabling System Restore after that.
>>
>> More detailed instrctions how to fight that malware can be found in
>> that
>> file ,written by me:
>> http://free.hit.bg/fightmalware/malware%20remove.doc
>>
>> ( Because of the fact the provided file is DOCument,you need
>> Office Pack
>> to open and view it.
>> If you don't have Microsoft Office ,Open Office or another ,you
>> should
>> download
>> Microsoft Word viewer (free)
>>
>> For XP and 2000
>>
>> Office Word viewer 2003
>>
http://www.microsoft.com/downloads/details.aspx?FamilyId=95E24C87-8732-48D5-8689-AB826E7B8FDF&displaylang=en
>>
>> For 95 , 98 and Me
>> Office Word viewer 95
>>
http://www.microsoft.com/downloads/details.aspx?FamilyID=a8e0c6ee-d736-4fd6-8a78-adaa6488b2ac&displaylang=en
>> )
>>
>>
>> It is advisable to change all your intenet password (email passwords
>> or
>> other account passwords)
>>
>>
>> If you have any other questions ,do not hesitate to contact the
>> community
>> again !
>>
>>
>> Panda_man
>> " Let's beat malware black and blue "
>> " Panda TruPrevent - the most intelligent technology to combat
>> unknown
>> malware "
>>
>>
>>
>>
>> "Gabriel South" wrote:
>>
>>> Hi!
>>>
>>> My computer have a keylogger installed that appears because the
>>> registration window of it was showed today. The name of the
>>> software is ARDAMAX keylogger.
>>>
>>> A dont know how to remove it!... can you help me please?....
>>>
>>> How can i activate/desactivate every program that executes when
>>> windows start up?... (I have not found it with "msconfig"...)
>>>
>>> Thaxs...

I'm guessing it's a cut and paste? Might want to spell check/fix genuine.
Might help people pay more attention - believe it or not spelling makes a
difference. When I worked as a sysop in a call center time and time again
they'd be telling phone workers to smile - little things like that help.

--
Galen - MS MVP - Windows (Shell/User & IE)
http://dts-l.org/

"My life is spent in one long effort to escape from the commonplaces of
existence." - Sherlock Holmes



Posted by David H. Lipman on December 3, 2005, 3:42 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

| Hi!
|
| My computer have a keylogger installed that appears because the registration
| window of it was showed today. The name of the software is ARDAMAX
| keylogger.
|
| A dont know how to remove it!... can you help me please?....
|
| How can i activate/desactivate every program that executes when windows
| start up?... (I have not found it with "msconfig"...)
|
| Thaxs...
|

The following tool will find and remove Keylogger Trojans.

Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go
through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal
Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the
PC.

You can choose to go to each menu item and just download the needed files or you
can
download the files and perform a scan in Normal Mode. Once you have downloaded
the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode
[F8 key
during boot] and re-run the menu again and choose which scanner you want to run
in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive
PDF help
file. http://www.ik-cs.com/multi-av.htm


* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Similar ThreadsPosted
stubborn Keylogger ! March 25, 2008, 4:19 pm
Re: How can I tell if a keylogger got added to my PC while I was in Beijing? November 3, 2008, 12:20 pm
PC ACME Keylogger Monitor...can't uninstall March 10, 2006, 10:06 pm
Is monitor.exe in ZoneAlarm directory a keylogger? May 27, 2007, 2:34 pm
KEYLOGGER KEYSTROKES MONITORING IN CHAT ROOMS. October 28, 2005, 3:32 pm

The site map in XML format XML site map

Contact Us | Privacy Policy