Reinstall to remove keylogger on system with 2 HDDs, one is data only

[winwolf]

First the background: I suspect a keylogger on my Win7 machine for two reasons:

The first: every once in a while the system freezes, but appears to keep track of my keystrokes and mouse clicks and catches up. During that time I'll try to launch task manager and once the system "comes back" it will appear along with executing any other keystrokes I've attempted. While I suppose that could just be a legit task hammering my CPU, it's only started doing so once every few weeks starting a number of months ago. Since it's been so intermittent, and the Eudora email client can be a bit of a resource hog when checking and processing email, I've not been too concerned about it. Of course, it could be other malware, not a keylogger.

What really concerns me is the second issue: I recently received the typical "I know your password" email. But this time, it was sent to an email address I use rarely - an email address I use only for one, non-financial business website - but it included a password that I do use, though NOT for that website. This leads me to believe that there actually is a keylogger on my system, but that the evil person involved just hasn't processed the data appropriately.

My first question: should I be worried?

Under the assumption that the answer is "yes", one thing I did with my laptop when I first set it up was to set it up with two separate physical hard drives, one of which holds the system and the other holds my data (I replaced the DVD drive with an SSD drive). The data drive is where I keep copies of the software should I need a reinstall, as well as all of my documents, etc. The only exception is that I also keep my Eudora downloaded files (attachments) on they system drive as well.

I've read that keyloggers and other malware are now very sneaky and can hide themselves in other software, etc. so that even the best scanners at best will let you know something is awry, but the best solution is to reimage the system, including wiping the system drive. See this post:

windows - How can I remove malicious spyware, malware, adware, viruses, trojans or rootkits from my PC? - Super User

My second question: If I do a clean install of Windows from a USB including wiping only the system disk, and then going through the tedium of reinstalling all of my applications, can I leave my data disk untouched? Should I fear that my folder with the install files for all of my applications has been compromised?

Next: Does anyone think it is enough to just do a clean install of Windows alone without wiping the system disk and reinstalling all of the applications? If so, what is the reasoning after reading the link above? I'm just asking because I have a lot of apps installed, and reinstalling them will take so long...


Finally: Given I have to reinstall Windows anyway, should I bite the bullet and move to Win10? I've heard so many negative things about Win10, but the Win7 end of support deadline looms and I may have to go through at least the OS install all over again going to Win10 anyway. Or am I better off solving the malware problem first, and then ensuring my apps will work with Win10, and then knowing I won't have to reinstall them.


Thanks in advance for any and all advice.

 

[torchwood]

Hi Winwolf,

Your best bet would be to shoot over to BleepingComputers, post in the am i infected sub-forum.
They will need to see the results of this tool, for starters, both reports.
Download Farbar Recovery Scan Tool

Not trying to fob you off, but were extremly thin on the ground for Security specialists.

When they fix it there will be no need for a clean install.
W10 does have an option to carry your programs/files.

Allthough W7 is coming EOL, just move away from MS programs and use others, i am staying
IE11 - note uncheck it in features
AV plenty of free ones available
WMP


Roy

 

[winwolf]

Thanks!