Someone's got a keymailer on my PC...

[makarman]

A few weeks ago, one of my freinds came over. He has been my friend since we were little kids. However, over the summer, he got bored... very bored... and a bored 14-year-old who knows a good deal about computers for his age can only mean trouble.
About a month ago, he started working on something. It was a "phishing" scam, disguised to look like a login page to major email services. He hosted the fake login pages. He then told his friends that he had sent them emails, and linked to the fake login page. He got about 10 people's passwords by doing this. After he fooled everyone that he could with this scam, he started inviting people to his house. He then allowed them each to log in to AIM. Unsuspecting anything from him, they all logged in. The next day, he had their passwords- he had keylogged them. Luckily, I was smart enough not to enter my password on his computer.
A few days later, I invited him over my house, figuring that, since he isn't always a bad kid, and that I would be right behind him when he was on my computer, he wouldn't do anything.
About a week later, I found a note in my backpack at school. Written on it was "nub" and my password. Knowing who it must have been, I got very angry at him. At first, I figured it must be my Gmail security question, which was very easy for anyone who had known me for a long time. I changed it to something that only I would know. I changed my password to Gmail as well as my password AIM, making them both differnet passwords.
However, the next day, I recieved the infamous AOL System Message IM telling me that my screen name was signed on in 2 locations. At this point I got really ticked off.
Later he signed on, and I got really angry at him. He eventually admitted that he had set up a keymailer on my PC. Apparently when I was going to the bathroom or getting a drink, he had downloaded such a program.
Now, the reason why I didn't get as mad at him as I should have is because he never actually did anything with the passwords that he stole. He merely kept them like trophies. But a keymailer is a different thing. He can get anything that I say on my computer. Since I talk to my family from time to time on my computer and discuss personal issues, I am quite scared at what he might see in my keylogs. I can only hope that he is merely searching the document for the AIM login prompt and getting my password, then proceeding to close the file and look no further.
I have no idea where the file is. What can I do?!

[pspmachine]

Heh! DESTROY HIS PC!

:P

--pspmachine

[makarman]

Originally Posted by WiSHGFX

Heh! DESTROY HIS PC!

:P

--pspmachine

:mrgreen: Yes, that definitely would work.

[Disturbed0]

Originally Posted by makarman

A few weeks ago, one of my freinds came over. He has been my friend since we were little kids. However, over the summer, he got bored... very bored... and a bored 14-year-old who knows a good deal about computers for his age can only mean trouble.
About a month ago, he started working on something. It was a "phishing" scam, disguised to look like a login page to major email services. He hosted the fake login pages. He then told his friends that he had sent them emails, and linked to the fake login page. He got about 10 people's passwords by doing this. After he fooled everyone that he could with this scam, he started inviting people to his house. He then allowed them each to log in to AIM. Unsuspecting anything from him, they all logged in. The next day, he had their passwords- he had keylogged them. Luckily, I was smart enough not to enter my password on his computer.
A few days later, I invited him over my house, figuring that, since he isn't always a bad kid, and that I would be right behind him when he was on my computer, he wouldn't do anything.
About a week later, I found a note in my backpack at school. Written on it was "nub" and my password. Knowing who it must have been, I got very angry at him. At first, I figured it must be my Gmail security question, which was very easy for anyone who had known me for a long time. I changed it to something that only I would know. I changed my password to Gmail as well as my password AIM, making them both differnet passwords.
However, the next day, I recieved the infamous AOL System Message IM telling me that my screen name was signed on in 2 locations. At this point I got really ticked off.
Later he signed on, and I got really angry at him. He eventually admitted that he had set up a keymailer on my PC. Apparently when I was going to the bathroom or getting a drink, he had downloaded such a program.
Now, the reason why I didn't get as mad at him as I should have is because he never actually did anything with the passwords that he stole. He merely kept them like trophies. But a keymailer is a different thing. He can get anything that I say on my computer. Since I talk to my family from time to time on my computer and discuss personal issues, I am quite scared at what he might see in my keylogs. I can only hope that he is merely searching the document for the AIM login prompt and getting my password, then proceeding to close the file and look no further.
I have no idea where the file is. What can I do?!

beat him up!!!!!!! and say "burn your frikkin PC or I will hunt you down and kill you" and be holding a knife.

Violence is always the answer!

[??????]

Originally Posted by makarman

A few weeks ago, one of my freinds came over. He has been my friend since we were little kids. However, over the summer, he got bored... very bored... and a bored 14-year-old who knows a good deal about computers for his age can only mean trouble.
About a month ago, he started working on something. It was a "phishing" scam, disguised to look like a login page to major email services. He hosted the fake login pages. He then told his friends that he had sent them emails, and linked to the fake login page. He got about 10 people's passwords by doing this. After he fooled everyone that he could with this scam, he started inviting people to his house. He then allowed them each to log in to AIM. Unsuspecting anything from him, they all logged in. The next day, he had their passwords- he had keylogged them. Luckily, I was smart enough not to enter my password on his computer.
A few days later, I invited him over my house, figuring that, since he isn't always a bad kid, and that I would be right behind him when he was on my computer, he wouldn't do anything.
About a week later, I found a note in my backpack at school. Written on it was "nub" and my password. Knowing who it must have been, I got very angry at him. At first, I figured it must be my Gmail security question, which was very easy for anyone who had known me for a long time. I changed it to something that only I would know. I changed my password to Gmail as well as my password AIM, making them both differnet passwords.
However, the next day, I recieved the infamous AOL System Message IM telling me that my screen name was signed on in 2 locations. At this point I got really ticked off.
Later he signed on, and I got really angry at him. He eventually admitted that he had set up a keymailer on my PC. Apparently when I was going to the bathroom or getting a drink, he had downloaded such a program.
Now, the reason why I didn't get as mad at him as I should have is because he never actually did anything with the passwords that he stole. He merely kept them like trophies. But a keymailer is a different thing. He can get anything that I say on my computer. Since I talk to my family from time to time on my computer and discuss personal issues, I am quite scared at what he might see in my keylogs. I can only hope that he is merely searching the document for the AIM login prompt and getting my password, then proceeding to close the file and look no further.
I have no idea where the file is. What can I do?!

Something I think you should do is scan your cmputer with "Ad-Aware SE Professional" then it should find something that is logging your computer, because once I installed "Perfect keylogger" on my computer and then I scanned with "Ad-Aware SE Professional" and it found the logger and took it off

EDIT:["THEN find him and kick his @Z$ and then bash his 3,000$ computer with a baseball BAT!!"]

[muki]

Download "Process Explorer" (google it)

It will show you each and every app running in the background, mroe than ordinary Windows task manager, and with greater detail. Google each running file Process Explorer shows you, and eventually you will hit a match as a keylogger. Remember in which folder the file is, right click on Process Explorer and "Kill Process". Next, go to that file and delete it off the face of your hard drive.

Additionally, you should check the windows registry (regedit). Specifically in:

HKEY_LOCAL_MACHINE\SOFTWA RE\Microsoft\Windows\Curr entVersion\Run
HKEY_CURRENT_USER\SOFTWAR E\Microsoft\Windows\Curre ntVersion\Run

If the filename is also in one of these keys, KILL IT! XP

Then run virus scannner and adware remove (such as adaware or spybot).

*has a lot of experience in manually removing viruses the hard way*

[M7thCC]

Wow, I would be really scared if something like that happened to me. I know for a fact though that loggers like the 'Perfect Keylogger' can be removed through Norton and most spyware removers. (I've done it myself) But I'm trying Process Explorer right now, it looks pretty cool.

[ACiD]

If all else fails, back-up data and format. If i were you id whack the kid upside the head say whats the matter with you?