View Full Version : Keylogger?
qeeked
02-27-2012, 04:01 AM
Ok, so recently someone has been loging into my account and the first time they cleaned my bank. I have changed my password around 10 times did a full norton 360 scan and nothing. I just logged on 5 minutes ago and the "last logged into" ip or w.e at the top was 67.221.255.12 anyone have any suggestions of how to help...
Dragonrider
02-27-2012, 04:08 AM
Which scripts have you used?
P1nky
02-27-2012, 04:09 AM
Mod can verify if it was anyone from SRL.
qeeked
02-27-2012, 04:12 AM
Just pinkys, but he wouldnt and i'm sorry for blaming you yesterday i was just mad. Anyway how to get rid of it?
Nemesis3X
02-27-2012, 04:12 AM
67.221.255.12
At least, you didn't do the mistake to click play right away. Now, You have his IP and a Mod can see if he is a member of this community. On the other side, If you did clean your pc and Norton didn't find it, It means you won't be able to get ride of it and Your need to Format your computer with a new version of Window. I hope you did split your Hard drive like me, so you don't have to download and get everything Back every time you do it!
Jokester
02-27-2012, 04:14 AM
Change your password from a different device. Like if you think your computer is keylogged theneverytime you enter it change it from your phone or another device. That's what im doing currently... I'm sure that whoever keylogged me is super pissed...
qeeked
02-27-2012, 04:17 AM
but everytime i'd log in i'd enter my password, so even if i did change it from a phone wouldnt it still pickup my pass?
Lynchh
02-27-2012, 04:21 AM
you could also just use a virtual keyboard. it would be alot easier, im pretty sure windows already comes with one on it.
Runescape Pro
02-27-2012, 04:21 AM
The only way to completely remove it is to reformat your hard drive and then do a fresh install of whatever os you use. This will delete all your files so make a backup of anything important.
Jokester
02-27-2012, 04:22 AM
but everytime i'd log in i'd enter my password, so even if i did change it from a phone wouldnt it still pickup my pass?
Ok step by step...
1. Log in to play runescape! From your computer which IS keylogged
2. Change the password from your phone which is NOT keylogged while you are still logged in
3. Enjoy not getting wiped again
So to recap! The keylogger is on your computer... not your phone or attached to your account!
qeeked
02-27-2012, 04:24 AM
should i pm a mod that ip address so they can see if its anyone from here?
Jokester
02-27-2012, 04:28 AM
should i pm a mod that ip address so they can see if its anyone from here?
Yes that would be a good thing to do. Anytime I've been keylogged I always click play now instead of looking at the ip address first...
By the way! I just pinged that IP address and got a response back! Gotta be a good thing right?
Brandon
02-27-2012, 04:32 AM
Change your recovery questions.. Get ur self a keyscrambler.. A keyscrambler will screw over most if not all of those keyloggers and rats that monitor data.
qeeked
02-27-2012, 04:37 AM
Yes that would be a good thing to do. Anytime I've been keylogged I always click play now instead of looking at the ip address first...
By the way! I just pinged that IP address and got a response back! Gotta be a good thing right?
I searched the ip and it said it from like the middle of brooklyn, then i google maped it and it came up as like euro transit corp or something.
LordJashin
02-27-2012, 04:39 AM
Change your recovery questions.. Get ur self a keyscrambler.. A keyscrambler will screw over most if not all of those keyloggers and rats that monitor data.
Keyscrambler mmm, you could also use VM Player, a virtual machine, install an OS on it, then run Simba. The keylogger won't be able to log that.
Edit: You could also use Zonealarm or a firewall to block all connections except those going to and from RS and Simba
Most RATs from say a place like HF can see past a VM and infect your real computer.
Keyscrambler mmm, you could also use VM Player, a virtual machine, install an OS on it, then run Simba. The keylogger won't be able to log that.
LordJashin
02-27-2012, 04:43 AM
Most RATs from say a place like HF can see past a VM and infect your real computer.
Meant for his case. His keylogger is on his current machine, if he goes and creates a VM it shouldn't be infected right?
If it's a decent keylogger or RAT, I'm sure it can infect the VM since the VM's files are on the computer itself.
qeeked
02-27-2012, 04:45 AM
I don't really care about any of the files on this computer, so im probably just going to do a full restore later tonight.
LordJashin
02-27-2012, 04:49 AM
If it's a decent keylogger or RAT, I'm sure it can infect the VM since the VM's files are on the computer itself.
If its FUD (Fully undetectable) Then your screwed. Try using every antivirus out there. I think the firewall idea should work, unless the RAT or keylogger can infect the mighty ZoneAlaram? O_O You should get rid of it, but if you really can't, use a data scrambler. Still can't stop it or are just lazy then format your drive, also reset your router too the person in brooklyn or w/e might have your router's ipaddress.
Edit: RIP Windows XP, with installing from disk - shit takes forever
qeeked
02-27-2012, 04:51 AM
If its FUD (Fully undetectable) Then your screwed. Try using every antivirus out there. I think the firewall idea should work, unless the RAT or keylogger can infect the mighty ZoneAlaram? O_O You should get rid of it, but if you really can't, use a data scrambler. Still can't stop it or are just lazy then format your drive, also reset your router too the person in brooklyn or w/e might have your router's ipaddress.
Edit: RIP Windows XP, with installing from disk - shit takes forever
I'm lazy, so ill just format my drive probably. I cant reset router im at college on their internet.
kingsleyeng
02-27-2012, 04:57 AM
reformatting your pc is the safest option
Brandon
02-27-2012, 04:57 AM
I'm lazy, so ill just format my drive probably. I cant reset router im at college on their internet.
Even if u could, it'd be useless.. Most hackers use No-IP.com with the DUC to hide their servers.. Ur most likely already screwed so just do the reformat. Right after u do it, just change ur recovery questions first.. then change ur password.
Powered by vBulletin® Version 4.2.1 Copyright © 2024 vBulletin Solutions, Inc. All rights reserved.