PC Review Forums Newsgroups Microsoft AntiSpyware Security Signatures kbhook.dll False Detection

Reply

kbhook.dll False Detection

 
Thread Tools Rate Thread
Old 30-03-2005, 04:43 AM   #1
Frenchy
Guest
 
Posts: n/a
Default kbhook.dll False Detection


Not sure if this is the right group to post this?

The MS Antispyware reports the file kbhook.dll in system32 as a Serious
keylogger Trojan (NetSpy keylogger)

Well it ain't on my computer!

It is an essential file for the Genius Wireless Keyboard, so somehow the
signatures need to differentiate between this legitimate file and the real
Trojan.

Thanks
Frenchy


  Reply With Quote
Old 30-03-2005, 06:57 PM   #2
Engel
Guest
 
Posts: n/a
Default kbhook.dll False Detection

Readthe treath above.

Engel
>-----Original Message-----
>Not sure if this is the right group to post this?
>
>The MS Antispyware reports the file kbhook.dll in

system32 as a Serious
>keylogger Trojan (NetSpy keylogger)
>
>Well it ain't on my computer!
>
>It is an essential file for the Genius Wireless Keyboard,

so somehow the
>signatures need to differentiate between this legitimate

file and the real
>Trojan.
>
>Thanks
>Frenchy
>
>
>.
>

  Reply With Quote
Old 30-03-2005, 08:11 PM   #3
Frenchy
Guest
 
Posts: n/a
Default Re: kbhook.dll False Detection

huh? What is a "Treath" and where do I find it <smile>

Frenchy
"Engel" <anonymous@discussions.microsoft.com> wrote in message
news:06a101c5355a$613fd830$a401280a@phx.gbl...
> Readthe treath above.
>
> Engel
>>-----Original Message-----
>>Not sure if this is the right group to post this?
>>
>>The MS Antispyware reports the file kbhook.dll in

> system32 as a Serious
>>keylogger Trojan (NetSpy keylogger)
>>
>>Well it ain't on my computer!
>>
>>It is an essential file for the Genius Wireless Keyboard,

> so somehow the
>>signatures need to differentiate between this legitimate

> file and the real
>>Trojan.
>>
>>Thanks
>>Frenchy
>>
>>
>>.
>>



  Reply With Quote
Old 30-03-2005, 10:10 PM   #4
Bill Sanderson
Guest
 
Posts: n/a
Default Re: kbhook.dll False Detection

I take it that you've assured yourself that this DLL matches something you
can vouch for---i.e. a byte compare or MD5 hash compare to something off the
installation media for the keyboard?

I'm not doubting your word--just want you to be certain--'cause a keylogger
in place is a Bad Thing.

This is the right place to post this issue--thanks!

Microsoft reads these groups.

--
FAQ for Microsoft Antispyware:
http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

"Frenchy" <invalid@invalid.com> wrote in message
news:eJrCAUWNFHA.1996@cpmsftngsa05.privatenews.mic rosoft.com...
> huh? What is a "Treath" and where do I find it <smile>
>
> Frenchy
> "Engel" <anonymous@discussions.microsoft.com> wrote in message
> news:06a101c5355a$613fd830$a401280a@phx.gbl...
>> Readthe treath above.
>>
>> Engel
>>>-----Original Message-----
>>>Not sure if this is the right group to post this?
>>>
>>>The MS Antispyware reports the file kbhook.dll in

>> system32 as a Serious
>>>keylogger Trojan (NetSpy keylogger)
>>>
>>>Well it ain't on my computer!
>>>
>>>It is an essential file for the Genius Wireless Keyboard,

>> so somehow the
>>>signatures need to differentiate between this legitimate

>> file and the real
>>>Trojan.
>>>
>>>Thanks
>>>Frenchy
>>>
>>>
>>>.
>>>

>
>



  Reply With Quote
Reply



Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off