Keylogger in CryptoSuite??

Discussion in 'Other Ghost Security Software' started by siliconman01, Feb 16, 2005.

Thread Status:
Not open for further replies.
  1. siliconman01

    siliconman01 Registered Member

    Joined:
    Mar 6, 2003
    Posts:
    780
    Location:
    West Virginia (USA)
    The latest spyware definitions of Spy Sweeper is detecting keylogger Klogger in C:\Program Files\Cryptosuite\unins000.exe...Hmmmm.

    Any DiamondCS feedback on this?

    I have submitted the uninstaller file to Webroot for analysis.
     
    Last edited: Feb 17, 2005
  2. WillieD

    WillieD Guest

    I too had unins000.exe flagged as KLogger, but it was found under
    program files > CD Wave
     
  3. gkweb

    gkweb Expert Firewall Tester

    Joined:
    Aug 29, 2003
    Posts:
    1,932
    Location:
    FRANCE, Rouen (76)
    Must be a false positive.
     
  4. Jason_R0

    Jason_R0 Developer

    Joined:
    Feb 16, 2005
    Posts:
    1,038
    Location:
    Australia
    Spysweeper is currently detecting a few of these uninstxxxx.exe's as spyware, they'll fix it eventually.
     
  5. controler

    controler Guest

    I don't have Spysweeper giving me any yet but Spycatcher gives me on on a TDS-3 file. Support says they will do nothing with it. They claim they will keep detecting any file that connects to the internet behind your back for whatever reason. I have contacted them twice on the issue. I am not using Cryptosuite right now though.

    Bruce
     
  6. BlueZannetti

    BlueZannetti Administrator

    Joined:
    Oct 19, 2003
    Posts:
    6,590
    Well, the ticket that I created at Webroot on this matter states - Status: Work In Progress, whatever that means.

    Blue
     
  7. siliconman01

    siliconman01 Registered Member

    Joined:
    Mar 6, 2003
    Posts:
    780
    Location:
    West Virginia (USA)
    An email back from Webroot on this as of 22-Feb-05

    "I will forward this to the definition guys to see if they have come across this false positive...In the meantime I would suggest putting it in your always keep folder.."
     
  8. siliconman01

    siliconman01 Registered Member

    Joined:
    Mar 6, 2003
    Posts:
    780
    Location:
    West Virginia (USA)
    This appears to be corrected in the 25-Feb-05 SS definition set 459.

    However, there appears to be a HOTBAR false positive ;) 20 registries entries found on my machine where AdAware, PestPatrol, Giant, NIS 2005 sees nothing.
     
Thread Status:
Not open for further replies.