do I have a keylogger or not?

Discussion in 'Windows Vista General Discussion' started by T5, Feb 18, 2007.

  1. T5

    T5 Guest

    xoftspy tells me that I have a keylogger called PCTattletale but windows
    defender doesnt pick it up nor does Norton 2007 protection centre nor does
    Hijackthis nor spybot S&D so do i have it or not?

    In a recent post a user told me that it must have been installed manually if
    it is there but I havent installed anything other than the os and office
    (apart from of course the antispy progs I have mentioned)

    Is PCTattletale a part of the parental control software in Vista?
    T5, Feb 18, 2007
    1. Advertisements

  2. T5

    Pipboy Guest

    Never heard of that anti-spyware prog. What is the file name it says is a
    keylogger? Search for that file on the internet and see what info you get
    about it.
    Pipboy, Feb 18, 2007
    1. Advertisements

  3. T5

    T5 Guest

    doing a google search I get that is actually a keylogger program that you
    can buy as a parental control but I cannot find it anywhere on my system
    but yet xoftspy finds it
    T5, Feb 18, 2007
  4. T5

    Dale Guest

    Just google PCTattletale.

    Perhaps the wife is checking up on you. If not her, someone is.

    Dale, Feb 18, 2007
  5. T5

    Dale Guest

    Many such programs don't show up on menus and are obfuscated in various ways
    such as calling their executable rundll.exe or svchost.exe.

    Dale, Feb 18, 2007
  6. It depends on what "winload.exe" looks like. "winload.exe" is part of Vista
    and "WinLoad.exe" is part of PC TATTLETALE
    Stacy M. Woods, Feb 19, 2007
  7. T5

    Dale Guest

    Nah, that's not enough to make the distinction reliably. PC Tattletale
    could have easily named their executable in lower case as well though, as
    you say, they didn't and you can use that as a hint but you really have to
    be more thorough than that.

    Some suggestions I have seen are to look at the Image Path Name in Task
    Manager (click View->Select Columns) and if you see svchost or winload or
    rundll32 running from a path other than your WINDOWS\SYSTEM\SYSTEM32 folder,
    it is obviously suspect.

    That said, svchost.exe and rundll32.exe are both huge security risks even
    when you know that the application is the legitimate one. Both of those
    applications are used to run other applications and obfuscate the real
    process that those two are running. Any installation program, including the
    installation for SideBar gadgets, can configure your system to run any
    program it wants using those two applications and the running application
    will not show up in task manager.

    Dale, Feb 19, 2007
  8. T5

    Pipboy Guest

    Download and run a-squared Free 2.1, it looks for keyloggers. Only thing is
    I don't know if it is compatible with Vista.
    Pipboy, Feb 20, 2007
  9. T5

    normviv73 Guest

    Paretologic Anti-Spy also makes XoftspySE and both use the same database for
    their scans. As of last week neither one had been upgraded to cover Vista so
    I think the fact that they find PCTattletale in
    c:\windows\system32\winload.exe is an error caused by lack of compatibility
    with Vista. I allowed it to corrupt winload several times before I realized
    that and could not reboot without putting in my Vista Ultimate 32 bit disk
    and booting to it for a repair session. I am going to uninstall my
    Paretologic software and try reinstalling it using Windows XP SP2
    compatiblity mode although that failed to solve a problem I was having with
    Symantec software that was advertised as being Vista compatible.
    NOTE: XoftspySE advertises on the internet that it is great for removing
    PCTattletale but does not mention the problem with Vista winload.exe.
    normviv73, Apr 2, 2007
  10. PCTattletale is a keylogging software which logs all your computer activities include keystroke logginf, application lauched, website visited etc. Another well-known keylogger is Myjad Keylogger as I know, Please refer to this:

    Both are monitoring programs for legitimate purposes like parental or company control. Only Trojan keylogger will auto-install if you have visited dirty websites. Otherwise there must be somone installs the keylogger on your computer to monitor your online activities.

    Most keyloggers couldn't be detected or scannd by anti-virus program, or even though there are many anti-keylogger softwares but they seem not work sowell.
    stevengerrard223, Aug 23, 2013
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.