Keylogger?

[justinlee]

Recently had my hotmail hacked so concerned that I may have a keylogger. Completed various scans and have attached results.

Can you see anything suspicious in these reports?

*I scanned with MBAM and all was clear so didn't feel the need to attach that report here seeing as it's a max of 4. Also, already scanned with Avast and again, all clear.

[mchain]

Have notified a certified malware cleaning expert to join your topic.  Please be patient as it may take a bit of time for this to happen as to different time zones, etc.,.

[essexboy]

I can see no indication of a keylogger, have you changed your Hotmail password ?

 Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

• Under the Custom Scans/Fixes box at the bottom, paste in the following
  
  
  

Code: [Select]

:OTL
IE - HKU\S-1-5-21-1241931330-1321431864-582149410-1002\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = 127.0.0.1:9421;<local>;*.local
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-1241931330-1321431864-582149410-1002\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.

:Commands
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]

• Then click the Run Fix button at the top
  
• Let the program run unhindered, reboot the PC when it is done
• Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

[justinlee]

Have notified a certified malware cleaning expert to join your topic.  Please be patient as it may take a bit of time for this to happen as to different time zones, etc.,.

Thank you

[justinlee]

I can see no indication of a keylogger, have you changed your Hotmail password ?

 Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

• Under the Custom Scans/Fixes box at the bottom, paste in the following
  
  
  

Code: [Select]

:OTL
IE - HKU\S-1-5-21-1241931330-1321431864-582149410-1002\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = 127.0.0.1:9421;<local>;*.local
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-1241931330-1321431864-582149410-1002\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.

:Commands
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]

• Then click the Run Fix button at the top
  
• Let the program run unhindered, reboot the PC when it is done
• Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

Yes, i have changed my hotmail password and some others. Do you want me to run the above fix? If I have no keyloggers do i need to do this? What is this for? Thanks.

[essexboy]

Just to tidy the last bits up that AdwCleaner missed