littleone
Spydex, Inc. Forum Newbie


Posts: 2
|
 |
Is the current Module legit or keylog program?
« on: Dec 17th, 2004, 1:52pm » |
Quote Modify
|
I am having a problem identifying if the currently loaded Module, is a legitimate program, or is it a Keylogger? It is called: S3appdll.dll I have been letting in run for a while now, but today I change AAK to Custome mode, from High Security Mode, and when I tryed to send a letter to a moderator on another forum, it allerted. That was the first time I heard it alert. So I went to investigate what was going on and discovered that you can modify the way AAK handles things. So I changed S3app to always prohibit (in the "rules action" column), reloaded my page, and voila -- the page was there, the words were there, but the form to fill in for sending mail was gone !! I could no longer send mail in that forum. This stumped me for a bit, but then I remembered to uncheck "always prohibit " in the rules selection, reloaded the page, and it was ok again. So then I thought.. I'll set that back to prohibit S3app... and Launched Internet Explorer after that change was made, and the alert was different, it only asked if it was ok to let Internet Explorer load, and it didn't say anything about S3appdll.dll. What do you think that means? I am thinking that there needs to be a Data Base of Known Keylogging Programs on Spydex that we can hook up to remotely from, and have that Data Base check out system for known rogue Keylogging programs. OK.... laugh if you must... I told you I don't know much about these things; but I am learning...by asking Questions. HA !! Ha!!
|