[Centuries]

Wow.. I am laughing so hard.
It has persistence so when you delete it, it comes back sometimes somewhere else.
If you open up the control panel of your logger... your IP doesn't come up and you can stop logging yourself?
I find it weird if it doesn't, as all my old ones have.

[Centuries]

https://gyazo.com/32aff4a5364d45c6379cc99fcc2e359c

Remove log does shit. No kill option

That's just the log. Right click your ip and there is no end, kill, or close?

[Centuries]

Because the file is probably still running.

It has persistence, not just because the "file is still running"

OP: Go talk to the owner of his logger again, if you have no kill option that logger is completely horrid in my honest opinion.

[Null Byte]

And where might the files be located?

Can you upload the stub and PM me a link? I'm going to do an analysis to see how this thing installed itself.

---

Link to analysis: https://www.hybrid-analysis.com/sample/9...9b66af9a31
^ Hybrid analysis not working on this. I'll try a different site.

Link to analysis: https://malwr.com/submission/status/Zjdj...c4ODlmZTM/
It should be finished in ~10 minutes, then we can figure out how to remove this.

[Null Byte]

Compiled a new stub with his compiler and uploaded to hybrid-analysis:
https://www.hybrid-analysis.com/sample/3...7dda95e249

Farbar still scanning

OK, it seems to have some sort of anti-emulation feature so I don't know if HA will be able to complete. And just post your logs on pastebin.com when you're done with that.

[Null Byte]

FRST: http://privatepaste.com/8f51200454
Addition: http://privatepaste.com/a6ee040d27
Shortcut: http://privatepaste.com/7646a54832

---

Analysis of the compiler: https://www.hybrid-analysis.com/sample/3...98eefd9f2/

Boot into safe mode, then open up msconfig.exe. Under the Startup tab you should see something called DayZ Hack; disable it. Apply your changes. Open up the an C:\Users\jordan\AppData\Local\Temp\ and delete a file named DayZ Hack.exe. Upload C:\Windows\SysWOW64\PnkBstrA.exe to VirusTotal.com and post the link here. Reboot your computer.

[Null Byte]

Owner of the keylogger told me how to remove it. Thanks for the help tho :).

http://www.neuber.com/taskmanager/proces...a.exe.html

Looks like battlefield or something

Alright, sounds good. Let us know if you need any more help.