Welcome, Guest. Please Login or Register.
Search
Members
Login
Register
   Mischel Internet Security Forum
   TrojanHunter
   TrojanHunter Scanner (Moderators: Helena, Gavin_Coe, Magnus)
   Netspy		 « Previous topic | Next topic »
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: Netspy  (Read 2390 times)
iggy
Newbie
*





   


Gender: male
 Posts: 4
Netspy
« on: Jan 14th, 2004, 9:16pm »		 Quote Quote  Modify Modify
Hope someone can help me with this! I ran T.H. as usual yesterday and found no problems. I then ran Spybot and was alerted to Netspy C:\WINDOWS\System32\\KBHOOK.DLL being found. I did a search for Netspy and it appears to be some kind of keylogger. I traced the file to the software I have just installed for a new wireless keyboard and mouse. They will not work properly if I uninstall the file. I scanned the file with T.H. and again nothing suspicious was found. Is this a false positive or have I got problems?
 Thanks in advance for any feedback!
IP Logged
Magnus
Administrator
*****



Ad astra per aspera.

   
WWW  

Posts: 4523
Re: Netspy
« Reply #1 on: Jan 14th, 2004, 9:21pm »		 Quote Quote  Modify Modify
Please email the file to submit@trojanhunter.com   It's probably a false positive by SpyBot but you can never be too safe...
IP Logged
Follow me on Twitter: http://twitter.com/mmischel
Magnus
Administrator
*****



Ad astra per aspera.

   
WWW  

Posts: 4523
Re: Netspy
« Reply #2 on: Jan 14th, 2004, 9:41pm »		 Quote Quote  Modify Modify
While this file does hook into the keyboard it does so to catch any presses of the "Sleep" key which is probably on your keyboard. It's not the NetSpy trojan, though it does use the same filename for the DLL file.
IP Logged
Follow me on Twitter: http://twitter.com/mmischel
iggy
Newbie
*





   


Gender: male
 Posts: 4
Re: Netspy
« Reply #3 on: Jan 14th, 2004, 9:46pm »		 Quote Quote  Modify Modify
Thanks Magnus!  SmileyI can sleep tonight now! Smiley
IP Logged
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 7357
Re: Netspy
« Reply #4 on: Jan 14th, 2004, 10:38pm »		 Quote Quote  Modify Modify
Iggy,
 
Might be a good idea to alert Spybot of the false positive and the configuration you have that is causing the false positive.  Might help others in the future.
IP Logged
______
TrojanHunter V5.5.1002...No. 1 AT in my Book and on my Box(es)! Windows 7 x64 Professional on a Dell XPS 410, 8 gbyte RAM, dual WD VelociRaptors, dual 24" UltraSharp FPD monitors, Logitech 5.1 Surround Sound; Windows 7 x86 Professional on a Dell Vostro 220s, 4 gbyte RAM, dual WD VelociRaptors. Common: router, cable modem.
Randy_Bell
Global Moderator
*****




TrojanHunter is the Best!

40416585 40416585   randybell_98   atmrover
WWW  

Gender: male
 Posts: 2883
Re: Netspy
« Reply #5 on: Jan 16th, 2004, 3:22pm »		 Quote Quote  Modify Modify
on Jan 14th, 2004, 9:41pm, Magnus wrote:
While this file does hook into the keyboard it does so to catch any presses of the "Sleep" key which is probably on your keyboard. It's not the NetSpy trojan, though it does use the same filename for the DLL file.

Glad to see the f.p. has been fixed.  This is a sign of weak signatures though, and I agree that SpyBot should be notified so they can fix the f.p.  Wink
IP Logged
iggy
Newbie
*





   


Gender: male
 Posts: 4
Re: Netspy
« Reply #6 on: Jan 16th, 2004, 11:44pm »		 Quote Quote  Modify Modify
I have notified Spybot and sent them the spybot system report they asked for.
IP Logged
Randy_Bell
Global Moderator
*****




TrojanHunter is the Best!

40416585 40416585   randybell_98   atmrover
WWW  

Gender: male
 Posts: 2883
Re: Netspy
« Reply #7 on: Jan 17th, 2004, 8:51pm »		 Quote Quote  Modify Modify
forgot to say, "Welcome to TH Forum", iggy!  Grin Cool Shocked Cheesy Wink Smiley
IP Logged
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« Previous topic | Next topic »