Windows Vista Forums
Vista Forums Home Join Vista Forums Windows 7 Forum Vista Tutorials Tags
Welcome to Windows Vista Forums. Our forum is dedicated to helping you find solutions with any problems, errors or issues you are experiencing with Windows Vista. The Vista forum also covers news and updates and has an extensive Windows Vista tutorial section that covers a wide range of tips and tricks.

Go Back   Vista Forums > Vista Newsgroups > Vista security

Vista - SpyMyPC Pro Keylogger found in Vista Beta 2 software.

Reply
 
Old 08-18-2006   #1 (permalink)
=?Utf-8?B?TWlrZQ==?=


 
 

SpyMyPC Pro Keylogger found in Vista Beta 2 software.

I found the keylogger program "SpyMyPC Pro" in the
Windows\System32\DriverStore\FileRepository directory.

It's in a Windows Input Printer Driver file.
I used "SPYCOP version 7" to find the keylogger.

I thought it was a false, I installed Vista Beta 2 on a Fresh Hard drive on
a differrent PC, and sure enough the keylogger is there.

I've found the keylogger in the same file on 5 Vista beta 2 PC's.

Microsoft you need to check this out as SpyCop has never given me a FALSE
positive.



My System SpecsSystem Spec
Old 08-18-2006   #2 (permalink)
Bill Sanderson


 
 

Re: SpyMyPC Pro Keylogger found in Vista Beta 2 software.

What does SpyCop support have to say about this finding?
What Vista build is this, and what source did you get it from?

--

"Mike" <Mike@discussions.microsoft.com> wrote in message
news:26F6A67F-D02D-46CB-BE3E-B3061336E995@microsoft.com...
>I found the keylogger program "SpyMyPC Pro" in the
> Windows\System32\DriverStore\FileRepository directory.
>
> It's in a Windows Input Printer Driver file.
> I used "SPYCOP version 7" to find the keylogger.
>
> I thought it was a false, I installed Vista Beta 2 on a Fresh Hard drive
> on
> a differrent PC, and sure enough the keylogger is there.
>
> I've found the keylogger in the same file on 5 Vista beta 2 PC's.
>
> Microsoft you need to check this out as SpyCop has never given me a FALSE
> positive.
>
>



My System SpecsSystem Spec
Old 08-18-2006   #3 (permalink)
=?Utf-8?B?TWlrZQ==?=


 
 

Re: SpyMyPC Pro Keylogger found in Vista Beta 2 software.

I left message on Spycop support. Still waiting for reply.

Here's the info:

The dll's in question are: "smpclrc.dll" and "smpclrd.dll"

These dll's are identified as belonging to the "SpyMyPC Pro by Benutec" a
Keyloggin program.

These dll's are located in:

Windows\System32\DriverStore\FileRepository\prnsa001.inf_3632565a\I386
directory.

What's interesting is they are in a SamSung Printer driver directory. Not
that a Korean company would do such a thing? "SONY" comes to mind.

So there's the info, if anyone cares.

BTW I have the Printer that this driver installs and I deleted these dll's
and my printer STILL Functions just FINE, so Hmmmmmmm!!!!!

False positive I don't know, but without these dll's in my system, shouldn't
my printer and it's features not work, or tell me there's a problem?

Food for thought





"Bill Sanderson" wrote:

> What does SpyCop support have to say about this finding?
> What Vista build is this, and what source did you get it from?
>
> --
>
> "Mike" <Mike@discussions.microsoft.com> wrote in message
> news:26F6A67F-D02D-46CB-BE3E-B3061336E995@microsoft.com...
> >I found the keylogger program "SpyMyPC Pro" in the
> > Windows\System32\DriverStore\FileRepository directory.
> >
> > It's in a Windows Input Printer Driver file.
> > I used "SPYCOP version 7" to find the keylogger.
> >
> > I thought it was a false, I installed Vista Beta 2 on a Fresh Hard drive
> > on
> > a differrent PC, and sure enough the keylogger is there.
> >
> > I've found the keylogger in the same file on 5 Vista beta 2 PC's.
> >
> > Microsoft you need to check this out as SpyCop has never given me a FALSE
> > positive.
> >
> >

>
>
>

My System SpecsSystem Spec
Old 08-19-2006   #4 (permalink)
Tony Hoyle


 
 

Re: SpyMyPC Pro Keylogger found in Vista Beta 2 software.

Mike wrote:
> I left message on Spycop support. Still waiting for reply.
>
> Here's the info:
>
> The dll's in question are: "smpclrc.dll" and "smpclrd.dll"
>

Yawn. The *first* hit in google for these files gives:

http://www.fileproperties.com/s/smpclrc.dll.htm

Sounds like spycop is a pile of junk if it's calling microsoft signed
drivers spyware.

Tony
My System SpecsSystem Spec
Old 08-21-2006   #5 (permalink)
Bill Sanderson


 
 

Re: SpyMyPC Pro Keylogger found in Vista Beta 2 software.

I'm inclined to think this is a false positive. Given the beta nature of
Vista, I don't think it is too surprising that removing these files doesn't
elicit any apparent failure with regard to printing. Have you verified that
the files are really gone, and haven't been replaced by some protective
mechanism?

I think the likelyhood of a keylogger--especially a known commercial
product--being included in legitimate Vista media is quite low.

All anti-spyware products have a risk for false positives. I wouldn't hold
such an occurrence against a vendor, but I would look carefully at their
response (or lack of)--to such reports.

Since you can grab the .dll files in question, another approach would be to
submit them to, for example, www.virustotal.com and see whether any of the
vendors there identify them as bad. This is not a perfect science--not all
antivirus vendors include spyware in their definition sets, but enough do
that I think this is well worth doing with a file that you believe to be
bad.

--

"Mike" <Mike@discussions.microsoft.com> wrote in message
news:1B812C0B-DA60-4590-884E-5F5728B0B202@microsoft.com...
>I left message on Spycop support. Still waiting for reply.
>
> Here's the info:
>
> The dll's in question are: "smpclrc.dll" and "smpclrd.dll"
>
> These dll's are identified as belonging to the "SpyMyPC Pro by Benutec" a
> Keyloggin program.
>
> These dll's are located in:
>
> Windows\System32\DriverStore\FileRepository\prnsa001.inf_3632565a\I386
> directory.
>
> What's interesting is they are in a SamSung Printer driver directory. Not
> that a Korean company would do such a thing? "SONY" comes to mind.
>
> So there's the info, if anyone cares.
>
> BTW I have the Printer that this driver installs and I deleted these dll's
> and my printer STILL Functions just FINE, so Hmmmmmmm!!!!!
>
> False positive I don't know, but without these dll's in my system,
> shouldn't
> my printer and it's features not work, or tell me there's a problem?
>
> Food for thought
>
>
>
>
>
> "Bill Sanderson" wrote:
>
>> What does SpyCop support have to say about this finding?
>> What Vista build is this, and what source did you get it from?
>>
>> --
>>
>> "Mike" <Mike@discussions.microsoft.com> wrote in message
>> news:26F6A67F-D02D-46CB-BE3E-B3061336E995@microsoft.com...
>> >I found the keylogger program "SpyMyPC Pro" in the
>> > Windows\System32\DriverStore\FileRepository directory.
>> >
>> > It's in a Windows Input Printer Driver file.
>> > I used "SPYCOP version 7" to find the keylogger.
>> >
>> > I thought it was a false, I installed Vista Beta 2 on a Fresh Hard
>> > drive
>> > on
>> > a differrent PC, and sure enough the keylogger is there.
>> >
>> > I've found the keylogger in the same file on 5 Vista beta 2 PC's.
>> >
>> > Microsoft you need to check this out as SpyCop has never given me a
>> > FALSE
>> > positive.
>> >
>> >

>>
>>
>>



My System SpecsSystem Spec
Old 01-14-2007   #6 (permalink)
FireWall2


 
 

RE: SpyMyPC Pro Keylogger found in Vista Beta 2 software.

Mike,

Routinely, those third party applications as you describe, intentionally and
wrongly indentify OS Spyware just for tricking you for wrongly believing they
are providing a service.

Please be assured, if you have 5 Vista's running that supposedly contain
Spyware applications;

1) Un-knowingly you installed the Spyware via third party applications.

2) Certain # 1 did not occur because Vista will not allow such malware
deploy within Vista !!!

--
Firewall

Disclaimer:
Accept Vista as it is, or, Abandon Vista


"Mike" wrote:

> I found the keylogger program "SpyMyPC Pro" in the
> Windows\System32\DriverStore\FileRepository directory.
>
> It's in a Windows Input Printer Driver file.
> I used "SPYCOP version 7" to find the keylogger.
>
> I thought it was a false, I installed Vista Beta 2 on a Fresh Hard drive on
> a differrent PC, and sure enough the keylogger is there.
>
> I've found the keylogger in the same file on 5 Vista beta 2 PC's.
>
> Microsoft you need to check this out as SpyCop has never given me a FALSE
> positive.
>
>

My System SpecsSystem Spec
Reply

Thread Tools


Similar Threads
Thread Forum
'disk burner or software not found..' on itune with vista Vista General
vista/ keylogger 5 and keylogger pro Vista security
Is PC Tattletale (keylogger) part of vista parental control software? Vista General
SpyMyPC Pro found Vista Beta 2 product Vista security
I found a reason why Beta 2 should NOT be a Public Beta! Vista General


Vista Forums is an independent web site and has not been authorized,
sponsored, or otherwise approved by Microsoft Corporation.
"Windows Vista", the Start Orb, and related materials are trademarks of Microsoft Corp.
© Designer Media Ltd

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46