I think i got keylogger, turkish one...

[Kalais]

my firewall blocked this, it want connect every 5 min or smth...



i used norton antivir, spyware doctor and spybot (all with newest updates), none of this soft found anything...

i backtrace from firewall this:

inetnum: * * * *212.174.113.0 - 212.174.113.255
netname: * * * *Boytas
descr: * * * * *Boytas Bilgisayar ve Tekstil
country: * * * *TR
admin-c: * * * *KC762-RIPE
tech-c: * * * * KC762-RIPE
status: * * * * ASSIGNED PA
mnt-by: * * * * AS9121-MNT
source: * * * * RIPE # Filtered


route: * * * *212.174.0.0/17
descr: * * * *TurkTelecom
origin: * * * AS9121
mnt-by: * * * AS9121-MNT
source: * * * RIPE # Filtered

i set up my FW to block this shit, but i would like to remove it, what i can do?

[!ndream]

http://www.tooto.com/keyloggerkiller/
* http://www.kaspersky.com/trials/
if kaspersky cant find and/or remove keylogger. format

and note
i havent syshost.exe (winxp pro) you can delete this file.

[Kalais]

yeah, on 1 of IT forums guy told me same, it is not system file, i deleted it in safe mode...

ty for help :wub:

[Jediay]

loggin to a naked char w8 1 week :rollseyes:

or dl AVG

[Kik0]

It pays to run the task manager and familiarise yourself with the processes running, it's the first thing I open as soon as I start up.

[Kalais]

Originally posted by Jediay
loggin to a naked char w8 1 week *:rollseyes:

no pls h43r: :P

if smth like that will happend i quit ko forever

and i ll never make fire drake update on site (gathering infos atm)