PDA

View Full Version : a keylogger possibly passed Spybot Professional



Hashtag
2014-09-09, 18:22
Request some help finding out what happened and what I did wrong.

Just received an email from google:

Someone recently used your password to try to sign in to your Google Account This person was using an application such as an email client or mobile device.
We prevented the sign-in attempt in case this was a hijacker trying to access your account. Please review the details of the sign-in attempt:

Tuesday, September 9, 2014 3:04:51 PM UTC
IP Address: 120.39.165.141
Location: Ningde, Fujian, China

Well after reading were the login attempt came from, I immediiately went to spybot to find out how.

I did a system scan and a rootkit scan, nothing else.


Need to go any second, so any help I'll be reading in 3 hours.


Thanks for any help in advance.


Greetings
Marc

tashi
2014-09-10, 03:41
Hello Hashtag, :greeting:

The message you received isn't necessarily caused by having a key logger infection.
https://www.google.com/landing/2step/

But someone can take a look at the system and advise.

Please see the forum sticky which includes guidelines and instructions in post #2 on how to provide the logs from Farbar Recovery Scan Tool and aswMBR, which are the logs used in the preliminary analysis.

http://forums.spybot.info/showthread.php?t=288

Then start a new topic posting the logs so a volunteer analyst can guide you. :)

Subscriptions (http://forums.spybot.info/faq.php?faq=vb3_user_profile#faq_vb3_subscriptions)

Members can keep track of their threads and choose how to be notified about updates.

Best regards.