SCKeylogger

[eyec]

ran SpyBot S&D this morning & it gave me a hit on this.

however, it identified this with the program file ETPREP.EXE.

info on that file from MS has it as a required file for running FDA.

it is still in my
C:/Program Files/Microsoft Shared Computer Toolkit/bin directory.

any insights?

 

[BadBigBen]

I can only suggest to run a HiJackThis log and paste it here for analysis...

SpyBot could be falsely identifying the code in the app as the keylogger... also running another AntiMalware app to double check, is always recommended, even better three or more...

suggestion: DL EWIDO AntiMalware (

http://www.ewido.net)

30 day free trial, and run that to double check...

Ben

"If it works don't fix it! If it doesn't use a sledgehammer..."

 

[eyec]

i run AVG, Defender, Adaware, SpyBot and have other removal tools available if i do not find anything with these and still suspect something.

Symantec has a whole page that lists the files this keylogger installs. i will check to see if i have any of them on my HD and then decide whether this is a false positive or not.

thanks for the advise.

 

[satrow]

Chill out eyec, sounds like a false positive to me - report it to the guys at Spybot ...

 

[eyec]

took a quick peek & did not see a link for reporting this. will check again later.

i too think it may be a false.

 

[pechenegs]

it appears to be a legit file?

http://msdn.microsoft.com/library/d.../en-us/xpehelp/html/xetskRunningEtprepexe.asp

Member of ASAP Alliance of Security Analysis Professionals

under the name khazars