How to detect a keylogger by WIN-SPY ?

[calmius]

Ok, so how do I find out if there is an active Win-Spy software running on my computer? I visited Win-spy's site and I looked at what they say. They say their fkn software can't be detected, it can't be deleted without password, starts at startup, not in the running programs list. This software mainly consists of keylogger, but also has screen capture, and file open history. I think someone may have placed it on my computer. I can't believe there is no way to detect it! There must be something! MY Norton AV doesn't detect anything, nor does the latest version of Ad Aware. That may mean that there is no spyware running, but I am sure it must be here.
Please help.

[jeresimo]

Most Keyloggers and Monitoring Software when on Stealth Mode are hard to detect. You can’t even see them in the Registry. One of them is the Spector Pro. They are usually seen by pressing the CTLR ALT SHIFT or various combinations, but if the one who put it there replaced the Keys combination, it will be very hard to show them up.

[jeresimo]

Try this site also: http://www.belarc.com/Download.html

I Dl'd this BELARC ADVISOR for free and it's very useful to know what hardware and software you got in your Comp. The US Marine is using it on their 70,000 PC's. This might help.

[fatboyjim]

Why so suspicious?

Jim

[calmius]

Because I've been away from home and when I come back I see so much suspicious stuff on the computer and I know this person has been visiting that site for WIN SPY, so I am suspicious as to why they want to spy on me or anyone.

[N/A]

lol...he might be spying you right now.
does he still have physical access to you pc?if he doesnt,the only way he can get spyinfo is over the internet.install a firewall.the free zonealarm firewall can protect you from both income/outgoing packets.
you can also buy win-spy and install it on your own pc.then your own win-spy will load when windoes starts,not thatguy's.then uninstalled it,so it wont load again.
if u have winme/xp,try System Restore.it should restore your pc to the time it was good.
you can also reinstall OS.

[calmius]

No, this person and I live in the same room, so I might confront him later. I just need to find out what is going on so I know for sure

[Trent Steel]

I agree with N/A, while it might seem a bit extreme but if you want to be sure that it does not exist on your system then do a low level format of the harddrive and reinstall everything. I remember a while ago that there was a war of sorts between some keylogging companies and anti-spy ware companies where they kept on one upping each other, this may well still be happenning. But I believe the key-logger comanies backed down as anyone able to install a anti-spy ware has admin rights so if the keylogger was used within a company to make sure the workers are not doing anything suspicious then they also would not have admin rights, but on a pc where the user does have admin rights they also have the right to be free from spying.

[Tuf]

I suppose I would contact Win-Spy and ask them how to tell.

[calmius]

I read on their site and they say the only way to uninstall is to enter the password by bringing up the menu by secret keys. They also claim it's literally impossible to detect it.

[Tuf]

I don't know anuthing about it but I'll bet they have some fix for situations where people put it on computers that don't belong to them. I wonder if your anti-virus program would consider it to be suspicious activity. I'd be curious to know if Norton has a tool to find programs like that.

[fatboyjim]

Run c:\winnt\unin.exe to disable

HTH

Jim