Anyone want to watch 6301 Documentaries?? - Page 1

Have a look at this site, loads of complete series, etc:- http://watchdocumentary.com/

The above another Gem from GIZMO, http://www.techsupportalert.com/

GIZMO lists and finds Free Software and is always worth a look

Hi Lennard, it's been a while. Let me help you with a link or two.... (Gizmo was my long gone, brindle dog's name.)

http://www.techsupportalert.com/

http://watchdocumentary.com/

I'm not so interested in the documentaries. But I think our PC(s) have picked up something nasty. And I think they still have it, even after a thorough cleaning. Might never get cured, even. I read that article (Gizmo site) on the various work arounds, but it doesn't sound so good to me.

I want to know about detecting key stroke loggers and impersonation type malware on PC's. And if MAC's could be affected because of a shared IP? That's what I was being sold/told, but I can't quite believe it!

Anybody know what I'm talking about? I've got a strange looking event log, that says some strange stuff...I had it removed, "professionally" and damn, if it isn't back already!  I just shut those PC's down because I'm too tired to think about them any more. Hmm, don't know what to think about this one.

Beetree,

What are you talking about? You need to be specfic. Post the log.

Hi Beetree, any of these help you to understand your event log, 1st one for WinXP, 2nd for Win Vista/7


http://support.microsoft.com/kb/308427


http://unlockforus.blogspot.co.uk/2010/02/event-viewer-in-windows-7-and-vista.html

+

System

- Provider       [ Name] Microsoft-Windows-Security-Auditing       [ Guid] {54849625-5478-4994-A5BA-3E3B0328C30D}

EventID 4672

Version 0

Level 0

Task 12548

Opcode 0

Keywords 0x8020000000000000

- TimeCreated       [ SystemTime] 2012-05-29T10:55:32.005021700Z

EventRecordID 54061

Correlation

- Execution       [ ProcessID] 584       [ ThreadID] 644

Channel Security

Computer RacerX

Security

-

EventData

SubjectUserSid

*********

SubjectUserName

SYSTEM

SubjectDomainName

NT AUTHORITY

SubjectLogonId

****

PrivilegeList

SeAssignPrimaryTokenPrivilege SeTcbPrivilege SeSecurityPrivilege SeTakeOwnershipPrivilege SeLoadDriverPrivilege SeBackupPrivilege SeRestorePrivilege SeDebugPrivilege SeAuditPrivilege SeSystemEnvironmentPrivilege SeImpersonatePrivilege

I need to figure out how to take a screen shot on the PC. I must be doing something wrong, what my kid told me to do isn't working. 

Anyway since about 1 AM, until this 7 AM when I turned on the machine I have:

43 Info Events
13 Warnings
23 Errors

This can't be a good number. Some seem to be a login/logoff war. Some say protection has been turned OFF, (don't like that one!)

(I did make a Homegroup change.) 



Lennard, the PC's are Window's 7, I'll see if those event codes tell me anything. It is just that, if it is a key logger, getting rid of them is what? Impossible? I have to change and limit users? Is that right?

OMG, I checked this out and really confused myself.... is this where I am headed or not?
Do either of you have any idea, just don't want to waste time barking up the wrong tree...

  http://unlockforus.blogspot.com/2012/05/how-to-enable-uac-to-prompt-for.html

HI Beetree, as you are using Win7 than taking a screen shot is easy!!!!

On your Start menu type in "Snipping Tool" in fact as soon as i type "sni" up it comes, ever so easy to use just follow instuctions on screen, save it for later use or Copy and Paste.

I Pin it to my Start Menu so it always there for quick use.

See below for a copy of your last post its that easy



 

Surely Beetree if you Delete The "Event Viewer" it wil re-appear, thats what it,s there for, in case you have a problem.

In any case what is your specific problem??

OK too many for me to list but type "anti-Keyloggers" into Google or Bing and choose your weapon

or go back to "Gizmo" and type in, top right search box, "anti-Keylogger and see there suggestion