Being tracked?

[S.P.I.]

Hey guys,

My ex-roommate did some crazy things with my pc before he left
(yea we didn't end up on good terms) Anyway, he installed some software that runs in the background and tracks all my AIM, Yahoo and Msn conversations. I am not sure what software it is though, can you guys help me get rid of it? I can post by hijackthis log here if you want it...

And I know this sounds like a dumb problem but I don't want to format my system either; I have a lot of important data saved.
Will appreciate any help..

[s0nIc]

yep, a HijackThis log would help.
it is most likely a keylogger... usual places to look is the Runkeys and Winlogon keys..

[shatteredsoul]

Personally I would run an AV with the most up to date definitions available in safe mode. Hijack this and A squared are great and all as well but run them in safe mode too.

[Computernerd22]

My ex-roommate did some crazy things with my pc before he left
(yea we didn't end up on good terms) Anyway, he installed some software that runs in the background and tracks all my AIM, Yahoo and Msn conversations. I am not sure what software it is though, can you guys help me get rid of it? I can post by hijackthis log here if you want it...

And I know this sounds like a dumb problem but I don't want to format my system either; I have a lot of important data saved.
Will appreciate any help..

Post the output from Hijackthis. As far as your ex-roomate situation, I say beat the living **** out of him/her then go on with your life.

Cheers, CN22

[morganlefay]

Personally I would backup my stuff and format\reinstall.

You never know what was put on there...could be a custom app...

That would be the surest way af removing evrything.

my .02 cdn

MLF

[S.P.I.]

Hey thanks a lot everyone, I didn't expect replies in such a short time; you guys are like the Justice League... only geekier haha jk

yep, a HijackThis log would help.
it is most likely a keylogger... usual places to look is the Runkeys and Winlogon keys..

Yea I will post the HijackThis log tonight, what are the Run/Winlogon keys? Forgive me if I sound like a dumb ass

And yea I would have kicked Jake's butt (ex roomy) but he is just too big hehe I think stabbing him with a sharp ice knife would be effective... there will be no fingerprints left either, the ice will melt by the time the police find his body

[S.P.I.]

Personally I would backup my stuff and format\reinstall.

You never know what was put on there...could be a custom app...

That would be the surest way af removing evrything.

my .02 cdn

MLF

Yea I will use that option if the hijackthis log doesn't help...

[Computernerd22]

And yea I would have kicked Jake's butt (ex roomy) but he is just too big hehe I think stabbing him with a sharp ice knife would be effective

When you state whats quoted above it makes you sounds like a pussy! Seriously, maybe you should go take a self defense class or something.

Me personally, I would have beat the living **** out of him but thats just me and the way I am. Of course, I know mixed mma so fighting people not a big deal.

[Aardpsymon]

Yea I will post the HijackThis log tonight, what are the Run/Winlogon keys? Forgive me if I sound like a dumb ass

Refering to keys in the registry that load things on startup.

start -> run -> regedit then find

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Current Version\Run

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Current Version\RunOnce

Everything listed there loads at startup.

Also, check the startup folder in start menu, its suprising how much you can find in there if you rarely bother to check it. All kinds of things you don't need :P

And I know that second key (as the name implies) only runs things once, but a sneaky person would make the virus put a key back there every time.

<edit>
Be damn careful what you delete in there, some of it will be vital.

[fourdc]

After he pissed me off he'd have better slept with one eye open. I have a shotgun, a shovel and 5 acres of woods. No body, no trial.