Keylogger detection

[Maguscreed]

This hasn't come up for me in a very long time so I'm looking for a little input.

I have a client whose email and a online account of another nature were both hacked.
I am fairly sure whoever did it simply compromised the hotmail account password somehow.

I have been scanning the machine with everything in creation in an attempt to locate possible keyloggers so far without any hits. (superantispyware did find a ton of cookies it didn't like though)

Anyhow a complete rebuild of the system drive would be very , very time consuming given the nature of the system and the fact they have not made any backups.

So I'm just looking for some ideas to possibly help determine if there were any keyloggers present.

Outside of that, what's the likelihood of a hotmail account being compromised? For the record it was a very simple password, so I do believe it may have been subject to brute force.

 

[Golden]

Hi,

If all the usual stuff hasn't picked anything up, then it may be time to go for the hardcore tools, but you will need guidance for that.

I recommend contacting Jacee or Corinne to help you this.

Regards,
Golden

 

[A Guy]

As Golden mentioned, most advanced tools are not scan and fix, but rather let you search for possible rootkit like behavior. Two of the best free tools for some time are GMER and IceSword (A Chinese program which doesn't seem to be updated). here is a translated tutorial.

You might try a more user friendly program like UnHackMe

Hopefully Jacee or Corrine will have better info.

A Guy

 

[Jacee]

WinPatrol will also scan for keyloggers ... there is a free version here BillP Studios - WinPatrol 2012