Keyboard Logger and Spyware Trojan

What is KEYLOGGER-TROJAN-SPY?

Keyboard Logger and Spyware Trojan is a critical-severity malware/security issue. This diagnosis detects spyware hooks capturing keyboard inputs, screenshots, or clipboard data, transmitting the records to remote command-and-control servers. The usual suspects are phishing link execution or downloading infected software utilities and use of compromised public network access. See the troubleshooting steps below for the fix.

Common Causes

• Phishing link execution or downloading infected software utilities.
• Use of compromised public network access.

Step-by-Step Fix Guide

• 1
  Run Microsoft Defender Offline scan to remove hidden rootkits.

  "Run Microsoft Defender Offline scan to remove hidden rootkits." handles an edge case some users report with KEYLOGGER-TROJAN-SPY.

• 2
  Inspect active network connections for unrecognized outbound processes.

  This step, "Inspect active network connections for unrecognized outbound processes.", specifically rules out use of compromised public network access.

• 3
  Update all passwords and security keys using a separate, verified clean device.

  "Update all passwords and security keys using a separate, verified clean device." handles an edge case some users report with KEYLOGGER-TROJAN-SPY.

Commands & Diagnostics

Frequently Asked Questions