How To Manually Remove Keyloggers

[Exo]

Guide to Manually Removing Keyloggers!

Recommended:
1: Ability to read/comprehend
2: A Keylogger (lol lets hope not)
3: Virus Protection of some sort

Step One~ Checking for Keyloggers

Ok, in my experiences with keyloggers, almost every single keylogger is detectable. No matter what the ads say, no matter if you have doubts about finding it, Theres always a way. The method i'll be discussing here is very simple. First what I personally would suggest is running some sort of system scan for new and threatening items on your computer. MOST TIMES this will prove to be useless, because most keyloggers aren't detectable by main-stream scanners. The other way to check is by going through your "System32" file.

Step Two~ Using "System32"

Accessing your System32 file is very simple. Start off by minimizing ALL open windows so that all you can see if your desktop and toolbar. Click on the "Start" button. It should be at the bottom left corner of your screen. When you click on it, it will expand with many assorted options. You want to click on the button "Run". This will bring up a text bar. Type "System32" in that bar exactly as I have. This will open a folder named "system32" on your desktop. To check for keyloggers you must do this. In between the icons in the white space that is un-occupied, right click. This will bring up a few options. Click on "Arrange By" or "Sort By", with different computers these options will be named differently. Once you open that, click on "date" or "modified" so that it arranges everything by oldest - newest. Now that the folder is arranged. Scroll to the very bottom, as far as you can go.

IF THERE ARE ANY FILES SUCH AS winlogins.001/winlogins.002 etc.

Then you have a keylogger.

Step Three~ Manually removing a Keylogger

Now that you've identified that you do indeed "HAVE" a keylogger installed on your computer. Removing it is very very simple. First push these buttons as I display:

Ctrl + Shift + Alt + H

That command will bring up any hidden files on your computer and display them in the toolbar. Once this is done, on the bottom right corner where the time/volume adjustments are displayed. There should be a new icon there such as:

"Ardamax Keylogger" or "Sneaky Keylogger"

If it is there, then you need to right click on it, and simply click on "Exit". This will de-activate the keylogger, but it will not remove it. To remove the keylogger fully, go back to your "System32" file and scroll to the bottom where the "winlogin" files were. Delete every single "winlogin" file. Some keylogger are tricky and you must delete them in order. ex:

Delete as follows; winlogin.001 then winlogin.002 etc.

Most keyloggers go up to "winlogin.007". Some keyloggers will allow you to delete some but not all of the winlogin files. To get around this, go into your "Trash Can" where your deleted files go, and empty it. Once this is done you should be able to delete the rest of the files. Along with the winlogin files there will usually be one last file right in front of that, if its there, then delete it. The name of it is always different so I can't tell you what it's called.

Ok that's it, this guide should allow your to remove all un-professional keyloggers. In some rare cases when you install keyloggers, but you can't find them, But are SURE that its there, it's best to just format your computer... sorry.

**This is completely from me, I had no help in making this Guide. If there is another guide like this somewhere else then its because we have the same ideas, no affiliations. I came up with this myself and have never viewed ANY other Keylogger protection guides**

~Exo

Awesome guide! 10/10 I love it!

[Insane Death]

Nice I showed this to my friend and he found a keylogger. He said thanks .

[Eskimo Bob]

Thx for posting this guide exo very helpful +rep to you

[Brandon]

+rep , im clean (H)

[M.D. Alemi]

Nice guide i like it alot good job

[Exo]

sweet im glad it helps!

[Reece]

Nice thread. I'd also recommend opening Task Manager, checking your processes and checking for anything that isn't supposed to be there.

The process should be running under your Username: For example if there was a keylogger it'll say:

svchost.exe SYSTEM
bpk.exe Reece (Keylogger)
firefox.exe Reece

Keep in mind, bpk.exe is an actual keylogger. So if you see this in your processes list, end it and delete it.

[Kashif]

nice 10/10 +rep

[Exo]

Thanks for the tip reece!