sythe's keylogger removal guide

If you think you are safe because u have a virus scanner, then you are dead wrong. Key loggers are piss easy to make, and very hard to detect. Do you have a FIREWALL?? yes you say... if its zone alarm then u may as well not have one , see if you can pick up an old version of Kerio Personal Firewall, it’s reliable and free. Key loggers in short LOG YOUR KEYS. They will send out all the data from your keyboard including passwords, credit card numbers, chats etc. So how do you stop them... With this guide!!

:1: Key logger nature
Key loggers, run in the background as a process in other words they run and you can’t see them. When you reboot they will start up again without you knowing. Key loggers are often called something stupid like rundll64.exe and hide themselves in windows' folders making them hard to find. New key loggers are made every second but the basic way a key logger works doesn’t change. This makes it possible to remove 99.9% of all key loggers, the other 0.1% would be classed as viruses for the simple reason they have to infect a file to continually run on start up, they will be caught with your virus scanner. Key loggers are often found in dodgy programs, downloaded off free hosted sites, if you play runescape, and have run a program form a dodgy site or downloaded something that isn’t mine off a runescape forums you probably have one.

:2: How to find keyloggers
Hit ctrl+alt+del... task manager should appear (if u get a different screen click the task manager button, if it’s grayed out, then it’s not your computer or u don’t have rights). In task manager, if you have 2k or XP click the processes tab. [ XP only: click the username button at the top of there second column, scroll past all the "SYSTEM" process ] Now look thru the process list. Anything suss? here is a list of some of the things that should be there.
Svchost.exe (2k and Xp)
explorer.exe (all)
systray (98, 95, me)
rundll32.exe (all)
services.exe (2k and XP)

Things that shouldn’t be there might include:
msblaster.exe
rundll64.exe

if u are unsure of something that is running, search for its name in Google, if u get a bunch of pages about DLL's and such then it’s probably ok.
Ok so now u have had a look thru ur running processes for Suss programs... Think you have found one?? good. If you run 95, 98 or ME then check ur systray (the little icon's bar at the bottom) for suss things like black icons.
:3: Removing key loggers
Ok well if you have googled a process and you are sure its a key logger, u can just search for it with windows search and delete it then reboot. Otherwise you’re still not sure? well this is possibly the best method to remove key loggers. Basically for a key logger to work it has to boot with your computer, if it doesn’t then it cant key log after you reboot. So, there is really only one way to run a program every time on startup without infecting another file (in which case it would be a virus) and that is to use services in the registry. So Open the start menu, and click run. In the run box type: "regedit" without the "'s of course. hit enter. You will be faced with a program with a bunch of directories on one side and an empty box on the other. This program browses your registry. Don’t delete anything (yet) or u could do some damage. Ok the path we are looking for is: "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" so, first expand HKEY_LOCAL_MACHINE then SOFTWARE then Microsoft .... etc until you get to RUN. This is where all the programs that run on startup will have put entries. So in the Name column you should see a bunch of keys (items) like ScanRegistry, and Winampagent (if u have winamp installed). Ok you are looking for thinks you didn’t install here. So ignore the name's column and start looking at the Data column. Do you see something there u saw in your process list earlier that you thought was suss? look at its name. What’s it say... something about windows update or some rubbish? delete it! There shouldn’t be ANYTHING here that you have not installed. There defiantly shouldn’t be any WindowsUpdater or anything like that here. Anything to do with windows you can delete from here because it is fake. Windows spawns its own crap, it doesn’t need Services. On the odd occasion u might find something with %SytemRoot% in it, leave that alone, windows needs it. Basically delete anything you are unsure of here... most programs can fix their reg stuff anyway so u can’t do much damage. There is by default Nothing here so windows is not responsible for the stuff here except the %systemroot% thing. Ok you think you have deleted your key logger’s entry here. good. Reboot and download kerio personal firewall 2.

:4: How come I still have a key logger?
Probably because u didn’t download kerio personal firewall 2 or didn’t reboot after fixing your reg. If you did, and you are sure you have done everything correctly then give me an email or MSN me at [email protected]

Regedit and Taskmanager are all you need to track down and kill MOST key loggers.

Hope this has helped.



https://web.archive.org/web/2005012...e.org/Keylogger Removal Guide - By Sythe.html

 

Removing Keylogger Guide (RSC Black Market)

 

please sticky this

 

i managed to remove my keylogger thanx to u

 

blugpig stealing memes from an rsc forum....oh how the mighty have fallen.

 

Sometimes the things I type show up on a website called Sythe.org. How do I stop this?

 

Your guide is shit... I just throw my computer out the window

 

Step 1] plug in 8 pin connector
Step 2] if it doesn't work throw out computer

 

kms