This hasn't come up for me in a very long time so I'm looking for a little input.
I have a client whose email and a online account of another nature were both hacked.
I am fairly sure whoever did it simply compromised the hotmail account password somehow.
I have been scanning the machine with everything in creation in an attempt to locate possible keyloggers so far without any hits. (superantispyware did find a ton of cookies it didn't like though)
Anyhow a complete rebuild of the system drive would be very , very time consuming given the nature of the system and the fact they have not made any backups.
So I'm just looking for some ideas to possibly help determine if there were any keyloggers present.
Outside of that, what's the likelihood of a hotmail account being compromised? For the record it was a very simple password, so I do believe it may have been subject to brute force.
System Manufacturer/Model Number Insane hobo technologies. ;-) OS Windows 7 x64 CPU Intel i7 2600k Motherboard Asrock z68 extreme 4 gen 3 Memory G.skill Ripjaw 16gigs @ 1866 Graphics Card Nvidia gtx580 (evga) Sound Card Integrated HD audio + hdmi Monitor(s) Displays 24" ASUS widescreen + 42" insignia Screen Resolution 1080p (1920x1080)
Keyboard Microsoft wireless 3000 (v2) Mouse MS - wireless 5000 (bluetrack) PSU 1 kilowatt SLI/Crossfire rated Silverstone modular Case NZXT Phantom + additional 220 fan Cooling Zalmann Hard Drives 128 Samsung 830
256 Samsung 840
3 x 1tb storage drive (various)
1 western digital 1tb (eSATA)
1 Seagate 1tb (eSATA) Internet Speed depends on if you ask me or my provider. Other Info The above information is provided as is, and the author assumes no responsibility for issues it may cause with your sanity or fanboyism.
30 Jun 2012
Golden
Windows 7 Ultimate SP1 (x64)
9,922 posts
South Australia
Hi,
If all the usual stuff hasn't picked anything up, then it may be time to go for the hardcore tools, but you will need guidance for that.
I recommend contacting Jacee or Corinne to help you this.
Computer type PC/Desktop System Manufacturer/Model Number Golden Mk. I.3 OS Windows 7 Ultimate SP1 (x64) CPU Intel i7 860 @ 2.80 GHz Motherboard Gigabyte P55A-UD3R Rev.1. Award BIOS F13 Memory 16GB Corsair Vengance DDR3 @ 661 MHz Dual Channel (9-9-9-24) Graphics Card EVGA NVidia GTX 560 1024MB Sound Card Realtek Integrated Monitor(s) Displays Dual Samsung SyncMaster 2494HS Screen Resolution 1920*1080 and 1920*1080
Keyboard Logitech G110 Mouse Logitech MX518 PSU Thermaltake ToughPower QFan 750W Case Thermaltake Element S VK60001W2Z Cooling Corsair H60 Water Cooling, 2*230mm and 2*80mm case fans Hard Drives 1*OCZ Vertex 2 60GB SSD;
2*Samsung F3 SpinPoint 1TB in RAID0;
3*Samsung F1 SpinPoint 1TB in RAID5;
1*Western Digital 500GB External USB 3.0
1*Seagate 500GB External USB 2.0 Internet Speed Not fast enough!!! Antivirus MSE and Malwarebytes Pro Browser Chrome Version 27 Other Info Laptop: ASUS X54C, Intel Core i3-2330M @ 2.0Ghz, 4GB RAM, Intel HD on-board graphics, Windows 7 Professional SP1 (x64), LinuxMint 14 (x64), PepperMint 3 (x86)
30 Jun 2012
A Guy
Windows 7 Home Premium x64 SP1
32,101 posts
Bay Area Peninsula
As Golden mentioned, most advanced tools are not scan and fix, but rather let you search for possible rootkit like behavior. Two of the best free tools for some time are GMER and IceSword (A Chinese program which doesn't seem to be updated). here is a translated tutorial.
You might try a more user friendly program like UnHackMe
System Manufacturer/Model Number Bruce ... somewhere in his 40's OS Windows 7 Ultimate 32bit SP1 CPU Intel(R) Core(TM)2 Quad CPU @ 2.40GHz, 2400 MHz Motherboard INTEL/D975XBX2 Memory 4 GB Graphics Card ATI Radeon HD 2600 Pro Monitor(s) Displays Samsung SyncMaster 914v Screen Resolution 1280 x 1024
Keyboard Standard PS/2 Keyboard Mouse Microsoft PS/2 Mouse PSU Rocketfish 700 W Case G.Skill Gigabyte Chassis Hard Drives 2/500GB each ... ST3500630AS ATA Device.
One is not connected Internet Speed DSL Antivirus Avira Internet Security Browser IE 9 Other Info ATI HDMI Audio