Sinisterly
Keylogger in HP audio driver (might want to clean up) - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: General (https://sinister.li/Forum-General)
+--- Forum: World News (https://sinister.li/Forum-World-News)
+--- Thread: Keylogger in HP audio driver (might want to clean up) (/Thread-Keylogger-in-HP-audio-driver-might-want-to-clean-up)



Keylogger in HP audio driver (might want to clean up) - insidious - 05-12-2017

A recent report revealed that a keylogger (imo it looks unintentional) is present in an HP audio driver.

Affects Windows OS' (downloaded through Windows update) and many laptop models.

Full Report: https://www.modzero.ch/advisories/MZ-17-01-Conexant-Keylogger.txt


Posting from my phone, but I'm checking my laptop + desktop tomorrow. If I find it I will post a tutorial on how to remove the Damned thing.

Posting from my phone, excuse typos :p


RE: Keylogger in HP audio driver (might want to clean up) - DarkMuse - 05-12-2017

God damn it Hewlett. Thanks for the post. Will be looking forward to your tutorial!

Edit:
Looks like I'm safe.


RE: Keylogger in HP audio driver (might want to clean up) - mothered - 05-12-2017

I've just performed a very quick Google search, and It seems to be a "keylogger-like" feature that doesn't seem to pose a threat solely as per It's purpose, but more so the fact that It documents everything Into a log file. Therefore If an attacker got hold of the file, then I don't need to elaborate further. That said, obviously you don't want anything monitoring your computing activity.


Here's how to remove It:

Quote: (1). Open Task Manager and check for a running process called MicTray64.exe. If this process exists, close it.
(2).  Navigate to c:\Windows\System32\MicTray64.exe and move the file to your Desktop.
(3). Now check if the file C:\Users\Public\MicTray.log exists. If it does, move this file to the Desktop as well.
(4). Now that the keylogger has been removed and you have isolated the log files, let's take a look at what was logged.
(5). Open the MicTray.log file on your desktop and examine the contents. If you notice that login names, passwords, banking info, or any other sensitive      login info has been logged, you should immediately change your passwords at the associated accounts.

Source: https://www.bleepingcomputer.com/news/security/keylogger-found-in-audio-driver-of-hp-laptops/


RE: Keylogger in HP audio driver (might want to clean up) - Bish0pQ - 05-12-2017

A lot of security vulnerabilities have been found in the Windows OS lately, but now one from HP. Being careful is the key. Thank you for the warning, luckily I don't have HP audio, but my parent's pc does.