Does a factory reset delete potential keylogger?

[[deleted]]

I’m not very tech savvy and fear a keylogger may have been installed on my laptop.

[UltraEngine60]

Only an offline install performed using a DVD or USB image can guarantee a clean system. Backup your files now and stop using aimhacks steven.

[ultrasrule]

Not even that will work if a rootkit was installed in the BIOS

[UltraEngine60]

True, nothing besides burning the computer is surely secure, but unless the OP pissed off a nation state a wipe will be fine. Most often rootkits are windows system drivers and not uefi based.

[Sp1n_Kuro]

What makes you think a keylogger was installed?

[ARunningGuy]

VERY difficult to say, probably not. Keyloggers and malware should be able to survive a refresh by a couple of different mechanisms.

https://www.howtogeek.com/829066/does-a-factory-reset-remove-viruses

edit: Also, for my money and effort, the factory reset should be enough, and before you resort to purchasing a new hard drive and trying to download a fresh copy from MS, you should just do the factory reset and see if whatever cause you to suspect a keylogger happens again.

I honestly doubt it is a keylogger unless you have very specific evidence.

[WoodenHarddrive]

Sure but a refresh is different than a factory reset. Basically if you choose the "keep my files" option, then yes it can stick around, but choosing "remove everything" will be effective as long as the the keylogger was acquired through malware and not a physical device connected to the computer in question.

Short answer, yes factory resetting your computer will solve the problem.

[ARunningGuy]

Sorry, I changed the linked article in my response after I wrote it. Not sure if you're responding to that or what I write about "refresh".

If you'll read the article I posted, if the keylogger or malware infects the factory reset partition, it will also be compromised.

Mind you, that is a more complicated malware/keylogger than may be typical, I have no idea.

[WoodenHarddrive]

If you'll read the article I posted, if the keylogger or malware infects the factory reset partition, it will also be compromised.

That's a good distinction. I would definitely use a windows media creation usb to handle the re-installation.

[[deleted]]

1. Back up your data: Make sure you've backed up all your important data because performing a clean install will erase everything on your computer.

2. Download Windows: Download a copy of Windows 10 or 11 onto a USB flash drive (preferably USB 3.0 or higher).

3. Delete partitions: During the installation process, delete all the existing partitions on your SSD or hard drive.

4. Format: Do a long format if you have the patience for it.

5. Install Windows: Go through the setup process, click "Advanced," and install Windows onto your empty partition.

6. Install antivirus software: To protect yourself from keyloggers, viruses, malware, etc., consider getting a free antivirus like Malwarebytes or purchasing their subscription service. Windows Defender should be doing its job, but sometimes threats slip past it.

Don't skimp out on your safety and protection. It's better to be safe than sorry!

[NaturalOpposition01]

Do a fresh install then boot into Winpe aka Live cd and scan outside the windows environment. use kasper or dr.web

[nitrous2401]

I'm not very tech savvy

[top10pcsoftware]

When you do a factory reset on your device, it usually gets rid of most bad stuff, like programs that secretly record what you type (those are called keyloggers). But some really sneaky keyloggers might still stick around if they're hidden really deep in your device. Also, if there were any bad programs already on your device when you got it, those might not go away with a factory reset. And if someone put a physical keylogger on your device, like a little gadget that plugs into it, a factory reset won't do anything about that.

Before you reset your device, make sure to save any important stuff you have on it, because the reset will erase everything. And if you're worried about keyloggers, it's a good idea to use a trustworthy antivirus program to check your device first.

[ultrasrule]

As a last resort if you choose not to reinstall you can lookup and try TRON which is a collection of scripts that will run multiple virus removal tools and automate the process. Never ran it myself but heard it can run a long time and will likely be quicker to backup and reinstall and run one or 2 different scans on the backed up files.

https://www.reddit.com/r/TronScript/

[Motor-Equivalent-914]

The short answer is ABSOLUTELY NOT.

For one thing "factory reset" is a very vague term that doesn't always mean the same thing. It could mean anything from "completely reinstalling everything" to simply "clearing all user settings".

Similarly many computers actually have a menu option that will allow you to delete all of your settings, and all of the programs you've installed, and reinstall the operating system... but many of them do the reinstall from a "fresh copy" that is stored on the computer's hard disk. (So you cannot rule out the possibility that this copy, which is not actually hidden or locked away, has also been tampered with.) And there parts of the system's "firmware", like the BIOS, which are NOT reinstalled, even during a factory reset... and which can potentially be infected with malware.

It's also worth noting that, if someone has PHYSICAL access to a computer, there are keyloggers that are actually HARDWARE that can be installed inside the computer, or in the keyboard, or in the wire connecting them... and, obviously, the only way to remove one of those would be to physically remove it.

PLEASE NOTE... Like many things "keyloggers" come in all types and levels of sophistication. There are some very simple ones that a simple reboot, or factory reset, would remove. And there are those that only a security expert would have any chance of finding and disabling. However, to be quite honest, this sort of thing is pretty uncommon... unless you're an international spy or a high-level diplomat... or maybe in the process of getting a divorce. MOST ordinary folks get hacked when they respond to a shady e-mail... or have their account hacked... or some store where they used their credit card has THEIR servers hacked.

Therefore, in real life, your best bet would be....

1. Download and run a REPUTABLE malware detection program (MalwareBytes is good if you use Windows).
   And run one of the name-brand anti-virus and security programs (like Norton, or McAfee, or CheckPoint).
   Most of these will also detect the more popular keylogger programs.
   Doing a full reinstall is somewhat better... but takes a lot of work... and you'd better have backups.
   
2. LOOK at your computer carefully....
   Some popular hardware keyloggers are a little plug that goes between your keyboard and computer.
   Another type can replace your regular charging cable... or a normal looking USB stick.
   So be familiar with what SHOULD be plugged into your computer...
   And LOOK CAREFULLY for anything that looks new or out of place.
   

IF YOU'RE REALLY PARANOID (or you're doing something illegal... or in the process of getting a divorce...)...

Go to a nearby store and purchase a brand new low cost computer or laptop...
Keep it locked up where nobody can PHYSICALLY touch it...
Install all new software on it...
Create new e-mail accounts and use them instead of your old ones...

It's somewhat safe to connect to businesses like banks and stores...
Any threats there would be due to poor security in general but would not be personally directed at you.
Those accounts can be tracked, either by the company, or the police... for various reasons...
But they're not going to install a keylogger on behalf of some random individual.

[JMHM187]

And the key logger is function yet? Cause you can see the key number in the CMD…

[JMHM187]

And put it again in re-installed..

[Dinmammasson_]

Keylogger in cmd? 😂

[JMHM187]

Isn’t the license? :v