Win 32 gen found need help

[John2009]

So I send it to Avast. I dont understand. I right click file, go to Email it, and not email it? Do I right click send to Avast company?

[John2009]

I found H@@Tkey shaack or whatever its called, So send it to user files in the cest(I mean copy)

[John2009]

Anaylisis of The dll on virus total, someone has been logging me!


http://www.virustotal.com/analisis/4f07dce905e0e8380839ef73fc36072a

[DavidR]

Whilst the interface says email to Alwil software (in the image also) this function has been improved so that it is actually uploaded as part of the avast update process. Previously people had problems emailing or they only used web mail so 'couldn't' send by email.

Open the chest, User Files section, File, Add, navigate to the location of the C:\WINDOWS\system32\h@tkeysh@@k.dll file select it and click the open button (doesn't actually open) and that starts the copy to the chest.

Yes the VT results look like a key logger i action so once you have it added to the chest, run MBAM and get rid of the copy and the other registry detections.

I would advise because there has been a key logger on your system that you start changing your user names and passwords, starting with any on-line banking or security/sensitive ones first.

[John2009]

I dont really have any banking but Ido have an xbox live/windows live account. But wouldn't that be stolen already?

[John2009]

Do I put the logger in anything like a folder when I email it?

[DavidR]

It might well have been 'stolen' as you say, but that doesn't mean you shouldn't bother to change the password to one that is stronger, at lease 8 characters long and a mix of alphanumeric characters and upper and lower case.

As I said you aren't physically emailing it, having added it to the user files section (right click on it and select email to Alwil software) and send it from there, no need to do anything to it as it will be encrypted by avast.

[John2009]

ok, Thanks for all the help, I removed all virus and adware traces from the computer with MBAM. Thank you very much!

[DavidR]

You're welcome.

[John2009]

oh and What do I do with all the rest of infected files in my Virus chest?

[DavidR]

There is no rush to delete anything from the chest, a protected area where it can do no harm. Anything that you send to the chest you should leave there for a few weeks. If after that time you have suffered no adverse effects from moving these to the chest, scan them again (inside the chest) and if they are still detected as viruses, delete them.

[John2009]

ok thanks!

[DavidR]

No problem.