|
||
|
Title: Is the current Module legit or keylog program? Post by littleone on Dec 17th, 2004, 1:52pm :-[ I am having a problem identifying if the currently loaded Module, is a legitimate program, or is it a Keylogger? It is called: S3appdll.dll I have been letting in run for a while now, but today I change AAK to Custome mode, from High Security Mode, and when I tryed to send a letter to a moderator on another forum, it allerted. That was the first time I heard it alert. So I went to investigate what was going on and discovered that you can modify the way AAK handles things. So I changed S3app to always prohibit (in the "rules action" column), reloaded my page, and voila -- the page was there, the words were there, but the form to fill in for sending mail was gone !! I could no longer send mail in that forum. This stumped me for a bit, but then I remembered to uncheck "always prohibit " in the rules selection, reloaded the page, and it was ok again. So then I thought.. I'll set that back to prohibit S3app... and Launched Internet Explorer after that change was made, and the alert was different, it only asked if it was ok to let Internet Explorer load, and it didn't say anything about S3appdll.dll. What do you think that means? I am thinking that there needs to be a Data Base of Known Keylogging Programs on Spydex that we can hook up to remotely from, and have that Data Base check out system for known rogue Keylogging programs. OK.... laugh if you must... I told you I don't know much about these things; but I am learning...by asking Questions. HA !! Ha!! |
||
|
Title: Re: Is the current Module legit or keylog program? Post by littleone on Dec 17th, 2004, 2:07pm :P By the way, when I said "alert" after launching Internet Explorer... I meant.."Floating Notification" :-[Please excuse error. |
||
|
Title: Re: Is the current Module legit or keylog program? Post by Eric on Dec 19th, 2004, 11:17am At first you have to understand that Advanced Anti Keylogger blocks any attempts at keyboard activity monitoring for absolutely all applications either they are spywares or normal legal programs. Your detected S3appdll.dll program is legal application of VIA Tech VT8361/VT8601/VT8501 Graphics Controller Software. So you can allow operation of this application. |