Detection & removal of illegally installed spyware on my PC

[thenewsusieq]

Hi Broni
My apologies - I see what you mean now. I thought you meant there was no point continuing because of the stupidity of my reply, but it was the impact on the thinking of someone else's that you were referring to. You can see how beaten up I'm feeling though. And if you're right that i'm barking up the wrong tree by looking at Stealthware when the problem is really to do with Network Administrator priveliges, can someone take this forward on that basis please? Even if we end up ruling out Steal;thware, at least that takes me forward, so thanks to anyone who has helped.

[patio]

Click on Broni's name...then select "send this member a personal message"...

This is not normal procedure for logs but to calm your apprehensions an exception will be made.

[Broni]

There is nothing very private in HJT logs. People post them in thousands every day on different computer boards, including this one.
To post it, just open the log in Notepad, copy everything, and paste it in your next reply.

[Broni]

Oh, I didn't see patio's post, so you may follow his advice, if you prefer it.

[evilfantasy]

A few thoughts.

A) There are as many commercial (legitimate paid for) keyloggers and "spy" programs out there as there are non-legitimate ones.

B) Removing the commercial "spy" programs is notoriously hard to do. Believe me on that. You normally can't just remove one. Most likely it needs to be uninstalled. That requires a password and often times Tech Support from the maker. They aren't normal programs. They're encrypted and password protected and many are undetectable. A good hacker doesn't leave tracks

C) If we can help remove it (I'm not convinced that we should) you need to trust us and post requested logs.

D) If it is a RAT (Remote Access Trojan) then we can surely help. We will need more than just a Hijackthis log.

That being said, the only reliable way to be sure the computer has no keyloggers is to completely wipe the drive and reinstall Windows.

Personally (and I know this sounds rude) you should take your suspicions to your ex and see how he handles it. If he denies it and you still don't believe him then wipe the drive and reinstall.

[Broni]

Just an update...
She sent me HJT log, and there is nothing there, unless it's super-hidden.
Instead of wiping hard drive off, I gave her another idea in her other thread: http://www.computerhope.com/forum/index.php/topic,54556.0.html

[evilfantasy]

Backs up this statement.

B) Removing the commercial "spy" programs is notoriously hard to do. Believe me on that. You normally can't just remove one. Most likely it needs to be uninstalled. That requires a password and often times Tech Support from the maker. They aren't normal programs. They're encrypted and password protected and many are undetectable.

[Broni]

Got it.

[patio]

Hi Patio

Thanks for that. You are going to think I am unbelievably stupid but what is a PM? I have run the scan & saved the file....now what?

No one here thinks anyone is that S word...all it is is a question you may not have the answer to.
That's why we're here...to hopefully provide answers.