Help! Help! Help!

[ryuko2121]

THere is a guy (forgot name) and he has an rs3 site with a keylogger!
I went on the site to check it out and he hacked my account! I got it back but how do we get rid of the keylogger!?!?!?!?!?!?!
He went out of the game saying "brb hacking atm"

Help!

[ryuko2121]

HELP! I tried to log in into the site and it didnt work and then my account got hacked. I dunno if i have a keylogger or something
The guy said he owns the site... But if he said "hacking atm" then its probably a keylogger!
I need serious help this could be dangerous!

[bip]

Lol never go 2 fake rs3 sites =o... Virus scan ur comp, then change ur pass/recovs =).

[ryuko2121]

I KNOW but if I change it wont the keylogger still be there?

[Ryder]

scan your computer first so keylogger is gone for ever then change your pass/rec questions and your all good
unless ur stupid enough to go back to the site

[ryuko2121]

I used AntiVir but it doesnt remove it or find it.
AntiVir, when it scans, moves bad files to "quarantine" (???) and yeah...
It didnt find the keylogger anyways...

[Ryder]

well than you don't have one
or your virus scanner is shit =\

[ryuko2121]

Im gonna get McAfee...
I have 3 computers in my house and we are connected to the same wierless thing... does that mean the keylogger can go on all of ours??? :( :(

[God]

You can just do a system recovery. You'll lose all ur data though

[ryuko2121]

Will the keylogger go onto the other computers in my house???

[ryuko2121]

And if I do a system recovery then will all the data go away from all the computers in my house?
And what do you need for a system recovery?

[ryuko2121]

Here is some more info:

AntiVir PersonalEdition Classic
Report file date: Sunday, December 02, 2007 12:46

Scanning for 955520 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Username: SYSTEM
Computer name: MY-BT911

Version information:
BUILD.DAT : 270 15603 Bytes 9/19/2007 13:32:00
AVSCAN.EXE : 7.0.6.1 290856 Bytes 9/28/2007 18:21:12
AVSCAN.DLL : 7.0.6.0 49192 Bytes 9/28/2007 18:21:12
LUKE.DLL : 7.0.5.3 147496 Bytes 9/28/2007 18:21:13
LUKERES.DLL : 7.0.6.1 10280 Bytes 9/28/2007 18:21:13
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 7/18/2007 18:21:14
ANTIVIR1.VDF : 7.0.0.0 1640448 Bytes 9/13/2007 18:21:15
ANTIVIR2.VDF : 7.0.1.30 1575424 Bytes 11/30/2007 15:27:46
ANTIVIR3.VDF : 7.0.1.31 2048 Bytes 11/30/2007 15:27:46
AVEWIN32.DLL : 7.6.0.34 3125760 Bytes 11/10/2007 07:42:42
AVWINLL.DLL : 1.0.0.7 14376 Bytes 2/26/2007 10:36:26
AVPREF.DLL : 7.0.2.2 25640 Bytes 9/28/2007 18:21:12
AVREP.DLL : 7.0.0.1 155688 Bytes 4/16/2007 13:16:24
AVPACK32.DLL : 7.3.0.15 360488 Bytes 9/28/2007 18:21:15
AVREG.DLL : 7.0.1.6 30760 Bytes 9/28/2007 18:21:12
AVARKT.DLL : 1.0.0.20 278568 Bytes 9/28/2007 18:21:12
AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 9/28/2007 18:21:12
NETNT.DLL : 7.0.0.0 7720 Bytes 3/8/2007 11:09:42
RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 9/28/2007 18:21:08
RCTEXT.DLL : 7.0.62.0 86056 Bytes 9/28/2007 18:21:08
SQLITE3.DLL : 3.3.17.1 339968 Bytes 9/28/2007 18:21:13

Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: D:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: Sunday, December 02, 2007 12:46

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'Anti-keylogger.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
Scan process 'usnsvc.exe' - '1' Module(s) have been scanned
Scan process 'GoogleUpdater.exe' - '1' Module(s) have been scanned
Scan process 'Steam.exe' - '1' Module(s) have been scanned
Scan process 'Ares.exe' - '1' Module(s) have been scanned
Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'realsched.exe' - '1' Module(s) have been scanned
Scan process 'M3SRCHMN.EXE' - '1' Module(s) have been scanned
Scan process 'E_FATIBHP.EXE' - '1' Module(s) have been scanned
Scan process 'MWSOEMON.EXE' - '1' Module(s) have been scanned
Scan process 'jusched.exe' - '1' Module(s) have been scanned
Scan process 'AIRPLUS.exe' - '1' Module(s) have been scanned
Scan process 'alcwzrd.exe' - '1' Module(s) have been scanned
Scan process 'SoundMan.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'MDM.EXE' - '1' Module(s) have been scanned
Scan process 'GoogleUpdaterService.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
39 processes with 39 modules were scanned

Start scanning boot sectors:
Boot sector 'C:\'
[NOTE] No virus was found!
Boot sector 'D:\'
[NOTE] No virus was found!

Starting to scan the registry.
The registry was scanned ( '28' files ).


Starting the file scan:

Begin scan in 'C:\'
C:\pagefile.sys
[WARNING] The file could not be opened!
Begin scan in 'D:\' <RESTORE>


End of the scan: Sunday, December 02, 2007 13:11
Used time: 25:39 min

The scan has been done completely.

4277 Scanning directories
255906 Files were scanned
0 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
0 files were moved to quarantine
0 files were renamed
1 Files cannot be scanned
255906 Files not concerned
6937 Archives were scanned
1 Warnings
0 Notes

[emteone]

Most likely it wasn't a keylogger.

I'm guessing you logged into the bogus RS3 site with your real RS UID & Pwd and the hacker just used that info to log into your account.

Use your recovery questions to change your pwd and I hope you had set your PIN.

[alf13995]

Never ever give your runescape pass to anyone or any site apart from www.runescape.com (http://www.runescape.com) or runescape client!!!

[Julian]

You got phished not keylogged.

you logged into the fake rs3 site, which gave him the password and username

I don't think you're keylogged :P

[ryuko2121]

WOW thanks good to know