Keylogger virus

[roguetrader]

I can now add that spybot, AVG antivirus and cc cleaner does not find this keylogger. I wil try more and report here tomorrow.

cheers

don

Probelm is, that it is a legitimate program with a legitamate purpose not a virus, so likely any definition based program will not view it as a virus. I wonder if what Neil has is actually the same thing or just something 'borrowing' its name,

 

[oatman]

KeyLogger is not a virus. AV progs and firewalls will not detect anything.

 

[neil]

Probelm is, that it is a legitimate program with a legitamate purpose not a virus, so likely any definition based program will not view it as a virus. I wonder if what Neil has is actually the same thing or just something 'borrowing' its name,

Windows "Defender" picks up on "Beyond Keylogger" and identifies it as high risk?

 

[roguetrader]

Not sure this is the same thing, but I'd be fairly convinced that what you have is not the same as what don_h has downloaded.
http://www.symantec.com/security_response/writeup.jsp?docid=2005-071717-3152-99&tabid=3

 

[roguetrader]

more research...not sure if any great help but...
http://www.auditmypc.com/process/uninshs.asp
Program may have following prossess emconv.exe unins000.exe UninsHs.exe
as shown here
http://www.fbmsoftware.com/spyware-...pywareTrends~Application~BeyondKeylogger.html

 

[roguetrader]

Hard to work out if this is actually referring to the same thing by the way it is written, but maybe worth a look.
http://www.fbmsoftware.com/spyware-...pywareTrends~Application~BeyondKeylogger.html

 

[oatman]

Found this
http://www.nuker.com/container/details/beyond_keylogger.php

 

[neil]

Hmm...whats an MCCI.TrayApp. ?
And MotiveSystem?

Found them by scratching around view prgammes facility in Windows Defender!

 

[Directional]

programs as difficult to remove as this one and much more malicious can be hidden as secret executables attached to innocent files, movies or joke progs sent by email.

A cracker group called Cult of the Dead Cow wrote a prog called BackOrifice which enables trojans and keyloggers.. basically any executable, to be blended with an innocous file.. send it out to your mates or enemies as a joke file and lo & behold you can access their computers remotely, stealth desk, keylog or root command anything you like basically.

Theres lots of similar progs out there.. just be very careful what you open in an email, if you arent 100% sure of its original source

 

[oatman]

http://www.answersthatwork.com/Tasklist_pages/tasklist_m.htm
http://www.line56.com/directory/company.asp?CompanyID=1013&CategoryID=11 :cheesy: