PCWorld Forums: Windows Vista Keylogger???? - PCWorld Forums

My brother just purchased a Dell Insperon with Windows Vista preloaded. He couldn't get XP. Anyway, out of habit, I ran a spyware check after getting the system up and running, and guess what. I found Keylogger spyware!!! Soooo..... being the good brother that I am, I deleted it. BIG MISTAKE! The next time he went to log on (another mistake I made during the setup - I provided a password) the computer would not recognize his password. I had to call tech service at Dell so they could walk me through the process of re-installing Windows (which requires formatting the hard drive and then reinstalling Windows from the disk provided). Then, after doing the setup thingy again (no password this time) the system came back to life and operates as it should. I again checked for any bugs and again found the Keylogger spyware. This time I left it in place.

During the setup process, I asked the tech why Dell installs spyware with their new system. He responded that Dell does not do that, and there should be no spyware on a new system. I asked his supervisor the same question, and he responded that MS may be the cupprit, but not Dell. He asked for the name of the product I used to detect the spyware (ZeroSpyware), and said he would try to confirm my statement. (By the way, the tech was very professional and did a good job.)

My question is this: Does MS actually install a Keylogger spyware with their Windows operating system? If so, how can I safely remove it so there are no adverse effects to the computer or any software programs I may install later? If not, what the heck is going on?

Thanks for any answers or help

Rascal

hello!
You should consider scanning with some other free anti-spyware scanners to check. AVG antispyware from this link is a good utility. Some security applications alerts can be bogus , some scanners consider some objects as harmful while other scanners wont. As i know, there is no such vista keylogger.

Hi Rascal and welcome to PCWorld. :-)




First, since your concern is related to a potential malicious application, I have moved this Discussion from the Windows Community into the Privacy & Security Community. Now, in relation to your question, you have to look at the application that you used to check for viruses and other malicious applications. Some security applications are known for giving what's called False Positives.

As far as I know, Microsoft is not installing Keyloggers within Windows Vista. Also, I highly doubt Dell would have any need to do that. If this computer is brand new, the only things that should be on that computer is the Operating System and the applications Dell choses to install before shipping the computer.

So, my questions to you are:

- What is the application you used to find this keylogger?

- What is the exact naming of this keylogger?

- Where was it located?

:D Hi :

Would be wise to check the "Quality" of any antispyware product being used; in addition it is wise to use at least 2 antiSPYWARE/antiTROJAN programs since One program will NEVER detect everything. And as you experienced, should ALWAYS INITIALLY "Quarantine" any alleged "Detection", then investigate as to IF it MAY be a false-positive, like you are now doing on this Forum .

As to "ZeroSpyware" ; several yrs ago it was listed as a "rogue/suspect" program, by antiSPYWARE Expert Eric Howes, on his spywarewarrior Site. It was "removed" from that "category" in 2004; however, it is wise to use ONLY his "Trustworthy" products, which can be found at http://www.spywarewarrior.com/rogue[/u]anti-spyware.htm#trustworthy . The "trustworthy" program we mostly recommend here is the FREE Version of "SUPERAntiSpyware", available from http://www.superantispyware.com/ . At a minimum, this program should be used as a "2nd Opinion" to the ZeroSpyware "detection". As already mentioned, UNLESS you post the EXACT Name of the ZeroSpyware "Detection", it is impossible to offer any trustworthy "Response" . In fact, most likely you should be contacting ZeroSpyware about their suspect "detection" . I recommend you use their "Live Chat" or "Email" available at http://www.fbmsoftware.com/support[/u]main~sid~11176126~bttn~269.html .

I have seen nothing on the various Sites I visit that MS has a "built-in" keylogger in their Vista OS .

However, Dell saying they have no "spyware" installed in their computers is a "borderline" statement . Many people complain about their "My Way" program, which many in the Malware-fighting "community" consider "it" adware at a minimum and bordering on "spyware". In addition, Dell's "Search Assistant" ( most likely their "My Way" ) and "URL Assistant" is in the database of the highly regarded "PC De-Crapifier", available at http://www.pcdecrapifier.com ; I strongly encourage you to visit this Site and seriously consider using the FREE program there .

Hi Rascal. When responding to posts, please click on the Reply hyperlink in the lower right hand corner of the post to which you want to respond. Editing your initial post makes it harder to decipher what your original post was.

I have three Vista machines - an HP Media Center with the HP supplies Vista Upgrade (which is still an OEM product), a self build desktop running Vista OEM full install and an HP laptop with Vista installed at the factory. Running Windows Defender (its free) and SuperAntiSpyware (free ver) on all three machines has never come up with anything with a description like that.

If you have the time and inclination to do an experiment. First download the install file for SuperAntiSpyware and put it either on a CD or a flash drive. Then the same process for Zerospyware.

Next disconnect the laptop from the world and do another reinstall from the recovery disc. Then, first off, install and run SuperAntispyware. Run Windows Defender. Then install and run the Zerospyware, and compare the results. Then again run both SuperAntispyware and Windows Defender.

You can have more than one spyware program, but can only have one active at a time.

It would be interesting to the group what the results would be. It would be extremely interesting if Windows Defender did not detect it before the installation of Zero, but did afterwards.

Hey SpiritWind

Thank you for your Very helpful response. I have Uninstalled ZeroSpyware, and will investigate the SuperAntiSpyware that you mentioned. I have installed AdAware and Spybot as two backup programs which should assist in identifying other unwanted "badware" in my system or my brothers.

The problem has been totally corrected, and I'm comfortable with the resolution and the explanations I received at this website. I want to thank everyone for their input and patience with a relative newbie.

Rascal

Most of us can remember when we were newbies. Even after 25+ years working on, in, around and playing with PC's (since they were called micro-computers), there are areas in which I am a newbie. My frustration in setting up a home network two years ago reminded me, and my dabble in Ubuntu did as well.
There are very few who are well versed in all areas, but combined the experience in the community is amazing. Our charge is to help, not embarras. A vist to some other sites shows how well this one works.

If you have any other questions or problems, as I like to say, the community is open 24/7.