TechSpot

Keykey.sys?

By xxdanielxx
Jun 23, 2008
Topic Status:
Not open for further replies.
  1. Hey i am fixing a laptop for my sister and her laptop would crash 1 time every day. I

    check the dump file and they all pointed to keykey.sys I check it out on google and

    they say it is a keylogger. Now the weird part is her My Picture folder is gone but

    when i check the space on the HDD it shows that it is taken up. Is there a way to fix

    this thanks.
     
  2. Blind Dragon

    Blind Dragon TS Evangelist Posts: 4,048

    KeyKey also has the ability to capture screenshots, when the machine is started up and shut down, and running processes. It runs in stealth mode, invisible to the user. It can be configured to send reports of the captured data by email.

    What antivirus does she have, most uptodate AV products should catch this

    I think spyware doctor will remove it, but would be worth changing any bank passwords or credit card numbers if she does online banking ect

    Also might try MBAM
     
  3. xxdanielxx

    xxdanielxx TS Rookie Topic Starter Posts: 1,214

    I had put AVG on it but i do not know if she lets it scan would it delete the picture folder or move it i tried using a app to recover deleted files but nothing showed up
     
  4. xxdanielxx

    xxdanielxx TS Rookie Topic Starter Posts: 1,214

    hey i just wanted to check if there would be any luck on recovering pictures or if i should ask in the windows section thanks
     
  5. Blind Dragon

    Blind Dragon TS Evangelist Posts: 4,048

    xp or vista

    And did you run any registry cleaners
     
  6. Blind Dragon

    Blind Dragon TS Evangelist Posts: 4,048

    i have to sleep but check here in your registry and see if you can find My Pictures, then right click it and select properties to make sure that the value is pointing to the location of where the pictures should be

    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
     
  7. xxdanielxx

    xxdanielxx TS Rookie Topic Starter Posts: 1,214

    xp not yet. But in hijackthis it does not show anythign it looks fine
     
  8. Blind Dragon

    Blind Dragon TS Evangelist Posts: 4,048

    does the above registry key have the value - my pictures in it
     
  9. xxdanielxx

    xxdanielxx TS Rookie Topic Starter Posts: 1,214

    yes it is %USERPROFILE%\My Documents\My Pictures
     
  10. xxdanielxx

    xxdanielxx TS Rookie Topic Starter Posts: 1,214

    edit double post
     
  11. Blind Dragon

    Blind Dragon TS Evangelist Posts: 4,048

    You could check her restore points to see if there is one before the problem started

    Thats where it should be pointing to

    Look here -> C:\Documents and Settings\%username%\My Documents\My Pictures

    Does the folder exist

    ------------------------------------------------------------------------

    Also lets try http://www.eset.eu/online-scanner

    Using Internet Explorer

    accept terms of service then click Start

    Install the active X if required

    Let me know the result
     
     
  12. xxdanielxx

    xxdanielxx TS Rookie Topic Starter Posts: 1,214

    I did try the restore point i set it to about 2 months ago but still nothing and no the folder is not there. Will try the online scanner
     
  13. Blind Dragon

    Blind Dragon TS Evangelist Posts: 4,048

    Can you tell me what programs you ran prior to My Pictures going missing
     
  14. xxdanielxx

    xxdanielxx TS Rookie Topic Starter Posts: 1,214

    Well this is what she said

    She used the computer as normal she let avg scan then she used the internet when

    she was done she turn it off by holding the power button then the next day she

    turn it on and it was like a new computer everything was gone background and pics

    Also i did a chkdsk /f/r
     
  15. Blind Dragon

    Blind Dragon TS Evangelist Posts: 4,048

    I don't know daniel. maybe try checking quarantine

    or try searching for individual file names - find 1 you will find them all kinda deal
     
  16. xxdanielxx

    xxdanielxx TS Rookie Topic Starter Posts: 1,214

    I have tried all that I think they are just gone and there is nothing to do thanks for the help
     
  17. Blind Dragon

    Blind Dragon TS Evangelist Posts: 4,048

    anytime :grinthumb
     
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.