keylogger trace

[M3mph15]

if a keylogger is installed through the net how to find out who has sent it

[Sgear17]

maybe looking at the log will help a bit....

[M3mph15]

but what if i dont have access to the keylogger's logs that is if he puts a password on it

[SSJVegeta-Sei]

Why not wait until it sends out its data packet, and trace where it goes?

Regards,

SSJVegeta-Sei

[valhallen]

most loggers as SSJVegeta-Sei said will be set to return all information collected back to the owner - otherwise what use is it to them? they log all your keystrokes but then have no way of getting them - lol

what I suggest doing is removing the keylogger (of course), reseting all passowrds (email, forum(s), connection etc), installing an AVP, Firewall but keep the original infection file.

Install this file on a spare PC (amking sure that you dont need it for anything and after a lean format to get rid of any residule information - just incase it isn't a keylogger at all) and monitor wat it does. What information it sends and to where - what files it alters etc

v_Ln

[M3mph15]

thanks guys

[jetherson]

use ethereal

[M3mph15]

What is ethereal man????

[MrLinus]

What is google man! http://www.ethereal.com/

It's a packet sniffer or network analyzer (depending on how you use it)

[M3mph15]

er thanks