The fuck is this?

Do a system restore to 3 months back.
Problem solved. Unless it's a hardcore virus, you're anal'd.

 

Wipe it clean and install a fresh version of your os, or take it into a computer shop and have them look at it.

 

Safest option: completely re-install windows with the disc.

 

Done.

 

C:\Users\Noob\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup\JavaLoad.exe

You've been a victim of a java drive-by.
Go to the location and remove the file and then registry entry from start-up.

 

That is maybe 1 type of keylogger. He is most likely not going to have it in that directory. I've never seen a keylogger / RAT in the startup folder because even normal AV's pick it up.

 

It's been taken DIRECTLY from his HJT log. Plus it could easily have been crypted, avoiding detection.

 

hmm keylogger= no doubt in that, id say format if you dont have much knowledge about the processes, also, a little hint would be, press ctrl+alt+delete, to open task manager, now check process for svchost. svchost is a trojan horse, so it may be the problem, at times its not the problem though, but yes it has been declared as a trojan

 

Unfortunately if the RAT is FUD (fully undetectable) the best way to be 100% that it is removed is to reformat your hard drive like what others have mentioned already..

The only way the undetectable RAT will be detected by AV an Malware programs is if the idiot who made it accidentally sends it to someone who knows what they are looking at an reports it to the AV program peeps, or if the douche that made it FUD runs a scan on his computer an reports the virus himself..

Another thing to be aware of is that if the hacker notices you making an efforf to rid yourself of his virus and see's that you are getting close he can also send another exe. an install it silently..

Your in between a rock and a hard place, hackforums (WHITE HAT SECTION ONLY) has heaps of people on that will evaluate your hijackthis info an tell you where to go from there.

My main suggestion and safest bet is to take all your non exe. files off ur computer and reformat

 

Get a global mod to check ip addresses.

 

If your using Powerbot, then i believe the client is infected. So stop using it asap, and delete it from your computer.