Windows Vista Tips

Windows Vista Tips > Newsgroups > Windows Vista Installation > Re: tattlletale winload keylogger trojan standard in Vista?

Reply
Thread Tools Display Modes

Re: tattlletale winload keylogger trojan standard in Vista?

 
 
Richard Urban
Guest
Posts: n/a

 
      01-14-2007
Winload.exe is a part of the Vista RTM operating system. You will find two
instances of it on your computer.

One will be in C:\Windows\System32 and is 918k

The other is in C:\Windows\System32\Boot and is 918k

Both are dated Thursday, ‎November ‎02, ‎2006, ‏‎07:42:32

--


Regards,

Richard Urban
Microsoft MVP Windows Shell/User
(For email, remove the obvious from my address)

Quote from George Ankner:
If you knew as much as you think you know,
You would realize that you don't know what you thought you knew!



"Marinus" <> wrote in message
news:9BFE8654-F9FB-44F4-A8A7-...
> After installing RC 1 Vista, I noticed using XSOFTSPY that in
> windows\system32\winload.EXE a Trojan is mentioned named tattletale. I
> can
> not remove it.
>
> I have understood that Tattletale is used for "parental control", i.e. a
> keylogger that should be used by parents to "spy" their children. Easily
> it
> can be used for other usage as well. Xsoftsy call is a severe risk. (I
> agree).
>
> My questions
> 1: Is this a standard element of Vista? or have I installed it by accident
> separately?
> 2: How can I remove this.
>
>
>
>
>


 
Reply With Quote
 
 
 
 
Richard Urban
Guest
Posts: n/a

 
      01-14-2007
Additionally, many forms of malware take on the name of a valid Windows
system file. If you find a similarly named file in another location - it is
a trojan, malware or virus.

--


Regards,

Richard Urban
Microsoft MVP Windows Shell/User
(For email, remove the obvious from my address)

Quote from George Ankner:
If you knew as much as you think you know,
You would realize that you don't know what you thought you knew!



"Richard Urban" <> wrote in message
news:%23K5WIG$...
> Winload.exe is a part of the Vista RTM operating system. You will find two
> instances of it on your computer.
>
> One will be in C:\Windows\System32 and is 918k
>
> The other is in C:\Windows\System32\Boot and is 918k
>
> Both are dated Thursday, ‎November ‎02, ‎2006, ‏‎07:42:32
>
> --
>
>
> Regards,
>
> Richard Urban
> Microsoft MVP Windows Shell/User
> (For email, remove the obvious from my address)
>
> Quote from George Ankner:
> If you knew as much as you think you know,
> You would realize that you don't know what you thought you knew!
>
>
>
> "Marinus" <> wrote in message
> news:9BFE8654-F9FB-44F4-A8A7-...
>> After installing RC 1 Vista, I noticed using XSOFTSPY that in
>> windows\system32\winload.EXE a Trojan is mentioned named tattletale. I
>> can
>> not remove it.
>>
>> I have understood that Tattletale is used for "parental control", i.e. a
>> keylogger that should be used by parents to "spy" their children. Easily
>> it
>> can be used for other usage as well. Xsoftsy call is a severe risk. (I
>> agree).
>>
>> My questions
>> 1: Is this a standard element of Vista? or have I installed it by
>> accident
>> separately?
>> 2: How can I remove this.
>>
>>
>>
>>
>>

>


 
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
RE: tattlletale winload keylogger trojan standard in Vista? smeesh Windows Vista Installation 0 03-31-2008 08:58 AM
Trojan and Keylogger immediately after install Young Mandy Windows Vista Installation 4 03-28-2007 05:26 AM
Re: tattlletale winload keylogger trojan standard in Vista? Carey Frisch [MVP] Windows Vista Installation 2 01-14-2007 02:48 PM
Re: tattlletale winload keylogger trojan standard in Vista? Peter M Windows Vista Installation 0 01-14-2007 02:37 AM
Re: tattlletale winload keylogger trojan standard in Vista? John Barnes Windows Vista Installation 0 01-13-2007 10:59 PM



1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59