The reason is because of a recent data leak. I suspected that someone may have inserted keylogger to my computer. (a software, trojan).

Some people think that the only way to really make sure there is no trojan or keyloggers on my computer is to reformat the computer.

Some think that there are other things that's also almost 100%. Things like checking which program to start.

What are those other things? What can I do to detect (and then remove) any keylogers or trojan from my computer?

What I used 1. I used Malwarebytes. 2. I think someone would use other software like hijack this and stuff.

What else can I do to ensure that nobody can keylog my computer?

Some of the answers are here

https://www.wikihow.com/Detect-and-Remove-Keyloggers https://electronics.howstuffworks.com/how-to-tech/how-to-scan-for-and-remove-spyware1.htm

I could use something more low level. Like scanning any start up programs.

I wonder if there is anything else. Hijackthis? Other scanner I should try?

I may be just paranoid and there could be no keyloggers at all in my computer. However, I handle financial sites and the last databreach cost significant amount of money.

  • 1
    "However, I notice a vulnerability that only a keylogger can open. I want to get rid of it." What does that mean? What vulnerability did you notice? – Anders Sep 25 '18 at 10:35
  • If someone can see everything you type in your computer and your screen then you are in trouble. I want to save my data EVEN if that happens – Sharen Eayrs Sep 25 '18 at 10:38
  • You have asked about 3 different things but asked about them as if they are the same: do you want to detect a keylogger, or remove a keylogger, or prevent a keylogger from being installed? – schroeder Sep 25 '18 at 12:58
  • All 3. Let's start with detecting. That's the most important thing. For preventing I made another question security.stackexchange.com/questions/194810/… – Sharen Eayrs Sep 30 '18 at 21:56
  • @Anders, I got one of my account hacked. And the info to hack that account is in a text file in my computer. – Sharen Eayrs Oct 8 '18 at 18:37

You could check who is hooking the keyboard API in the system using something like this or this and work back from there. However there are many other techniques to achieve this so unless you are experienced with win32 systems and plan to spend a bunch of time I would recommend you to just do a clean install.

p.s If you want to validate your assumption you could create a new account somewhere and monitor whether someone logs into it, sort of a honeypot account...

| improve this answer | |
  • Are you sure those are save? If that program can know what I type, isn't that program a keylogger itself? – Sharen Eayrs Sep 30 '18 at 21:59
  • @SharenEayrs please read the details. Those programs are not recording what you type but inspecting what processes hook the keyboard API. – schroeder Sep 30 '18 at 22:10
  • Can anyone confirm that this is the way? – Sharen Eayrs Oct 2 '18 at 17:12

Not the answer you're looking for? Browse other questions tagged or ask your own question.