Hidden Keylogger

[MrSawler]

Hello,

I have a problem with my computer. About a year ago, I started been hacked from a lot of account. First I though it was just a breach from some random account, mostly videos games, but then it was getting more serious when my PayPal account was hacked.

I ran a lot of different scans with Avast!, but also with Malwarevytes, AdCleaner, Spybot and Hijackthis, without much success.

But today I just realised that when I start a new scan with Malwarebytes, it only lasted 5 secondes. So I did some research and complety remove Malwarebytes with the "mbam-clean" tool, then re-installed. I did a first scan and found some things. So I did another scan with AdCleaner and Spybot.

I also installed a fresh version of Avira and did a full scan, it find nothing. I cannot find the log any more.

Then I did another run of AdCleaner and Spybot, but again find nothing.

So I did another scan with Malwarebyte, along with a scan the Farbar Recovery Scan Tool.

Any ideas ?

 

Thanks,

Thomas

 

Malwarebyte first scan.txt

Malwarebyte last scan.txt

Addition.txt

FRST.txt

[MrSawler]

Hi,

I know  I shouldn't do anything until someone replied, but I tried to run a live anti-virus on a USB while waiting for someone to reply. I chose AVG Rescue CD. After a complet e scan, it found virus and something on the registry. I've attached the reg file (renamed as .txt).

I also did another run of Malwarebyte and FSRT.

Thanks,

Thomas

HKU_S-1-5-21-877099498-2822925732-4218020341-1001_Software_Classes_VirtualStore_Machine_Software_Microsoft_Command Processor__AutoRun.txt

Malwarebyte scan.txt

Addition.txt

FRST.txt

[AdvancedSetup]

Hello @MrSawler and

Let me have you run the following please. This will also run  a FULL disk check on your system. This may take a few hours to complete but please let it run.

 

Please download the attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST or FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system.

Run FRST or FRST64 and press the Fix button just once and wait.
If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach or post it to your next reply.

Note: If the tool warned you about an outdated version please download and run the updated version.

 

fixlist.txt

Thanks

Ron

 

[MrSawler]

Hello,

Sorry for my late reply, I wasn't home.

Here is my Fixlog file. I had to replace "ECHO Y" with "ECHO O" in your script because of my french computer.

Thanks,

Thomas

Fixlog.txt

[AdvancedSetup]

Thanks for the update on the French command line issue, nice to know.

How is the computer running now?

What issues if any are you still having?

 

Thanks

Ron

 

[AdvancedSetup]

Due to the lack of feedback, this topic is closed to prevent others from posting here.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread.

Thanks