Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: 45,120 events in event viewer, I have a keylogger

13 Apr 2013   #11
Amingst

Windows 7 Home Premium 64bit
 
 

it keeps saying kernel tracing errors in event viewer and it wont let me run disk check and it BSOD's with code xd1 and its because of iastorA.sys


My System SpecsSystem Spec
.

13 Apr 2013   #12
Amingst

Windows 7 Home Premium 64bit
 
 

everything turned negative except spyware thing. It showed 368 cookies. My AV is avast free and the option in bios is ata ahci and intel smart response
My System SpecsSystem Spec
13 Apr 2013   #13
VistaKing

Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
 
 

DescriptionDriverDownload
Intel RST (Rapid Storage Technology)iaStorA.sysdownload

iaStorA.sys is a driver . Update the driver by clicking on the Download button above .

Lets scan for viruses ---------------------------------


Note   Note
Backup your flash drive cause it will be wiped doing the steps below


Create a HitmanPro Kickstart USB flash drive, on a “clean” (non-infected) computer, download HitmanPro from the below link.

DescriptionVersionOperating SystemDownload
HitmanPro with Kickstart3.7.3.193Windows 7 64-bit (x64)download

DescriptionVersionOperating SystemDownload
HitmanPro with Kickstart3.7.3.193Windows 7 32-bit (x86)download

Insert your USB flash drive into your computer and launch the HitmanPro program .

Inside the program, click on the flying kick icon . Once you see your flash drive icon inside the program click on it and click on the Install Kickstart button ( this will wipe the flash drive ) click Yes to continue .

Once you're done remove the flash drive using the safely hardware removal inside the systray next to the time on the right hand side . Icon has a green arrow .

Plug the USB drive to the infected computer and restart the PC . While the PC is starting up press F12 and choose USB device

Scan the computer with HITMAN and delete anything it finds and remove the USB drive and restart the PC .

Upload the log once completed .



Run this program FIRST


Let's see if the following will take care of the issue:

TDSSKiller
DescriptionDownload
TDSSKILERdownload

Right-click the program and select: Extract to tdsskiller\


A TDSSKiller folder is found on your Desktop.
Open the folder, and double-click the TDSSKiller application.


When the TDSSKiller console opens, click on: Change Parameters
Under Additional Options, place a check in the box next to: Detect TDLFS File System
Click: OK


Press: Start Scan


If a suspicious object is detected, the default action is Skip, leave it as is, and click on: Continue
If malicious objects are found, they show in the Scan results.
Ensure Cure (the default) is selected, then click: Continue > Reboot now, to finish the cleaning process.
(Note: If Cure is not available, select Skip, >>Do not select: Delete<<)


When done, the tool outputs its log to the disk with the Windows Operating System, normally C:\


Logs have a name like:
C:\TDSSKiller.X.X.X_12.04.2013_15.31.43_log.txt

Note   Note
you should be able to place the exe file inside a flash drive . Boot up to a command prompt at startup and run the tool from there .
My System SpecsSystem Spec
.


13 Apr 2013   #14
Layback Bear

Windows 7 Pro. 64/SP-1
 
 

Information that might help you good folks.

http://www.sevenforums.com/general-d...ahci-irst.html
My System SpecsSystem Spec
13 Apr 2013   #15
Jacee
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

What Anti-virus do you have installed? Have you used PC Tools?
My System SpecsSystem Spec
13 Apr 2013   #16
VistaKing

Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
 
 

Jacee sounds like he has a rootkit
My System SpecsSystem Spec
13 Apr 2013   #17
Jacee
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

Well, we need to get some "specifics" before we start throwing tools at 'em to download.
My System SpecsSystem Spec
13 Apr 2013   #18
VistaKing

Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
 
 

Quote   Quote: Originally Posted by Jacee View Post
What Anti-virus do you have installed? Have you used PC Tools?
If you read here he states what AV he has
My System SpecsSystem Spec
13 Apr 2013   #19
Jacee
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

OKay, see that AV is "avast free".
My System SpecsSystem Spec
13 Apr 2013   #20
VistaKing

Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
 
 

You asked a question . You got it answered you didn't ask if it was free or paid.
My System SpecsSystem Spec
Reply

 45,120 events in event viewer, I have a keylogger




Thread Tools





Similar help and support threads
Thread Forum
Event Viewer: Clear All Events
How to Clear all Event Logs in Event Viewer using Windows PowerShell This tutorial will show you how to quickly clear all event logs in Event Viewer with a one line PowerShell script. This one line command clears each log in the Event log list one at a time. wevtutil el gets the Event log...
Tutorials
Can not get a chkdsk log in Events Viewer
I can not get a log saved in Events/Windows Logs/Applications. Have run chkdsk/f from Administrator CMD prompt...chkdsk runs at reboot...but no log is created in Events Viewer as it always had been previously ? Any ideas on why and/or where the reboot chkdsk/f logs are ? jpg is after a...
Performance & Maintenance
How To Clear Administrative Events Log - Event Viewer
Hi: Does anyone know how to clear the Administrative Events log listed under Custom Views in the Event Viewer? All the logs listed under the Windows logs have options to clear, but the above does not. Thanks, ColTom2
Performance & Maintenance
Events Viewer CAP12 Error
I have just discovered that for the past few days I have been getting a CAP12 Error in Events Viewer/Administrative Events. I have tried to attach a picture of the General and Details tab but I am not sure how this is going to appear. This error message keeps appearing and I wonder if...
General Discussion
Events Viewer
I am running Win 7 Pro, 32 bits I was trying to run down a problem with Windows Explorer crashing and wanted to check the Events Log. When I went to check it it I got this: I then check Services and got this:
BSOD Help and Support
How to clear events in viewer?
How, in W7, does one clear the events? In vista, I went to actions and clear events. On W7, I do not see a clear events. Thanks Dave
General Discussion

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 03:59.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App