Is this a Keylogger file?

[Guest]

I ran this program to check for keylogging files.
It thought perhaps this file was one -
c:\windows\system32\config\software.LOG
I am unable to view or delete or copy this file.
Is this a system file or could it be used for some malicious keylogging
program?

 

[David H. Lipman]

From: "IndyF1" <[email protected]>

| I ran this program to check for keylogging files.
| It thought perhaps this file was one -
| c:\windows\system32\config\software.LOG
| I am unable to view or delete or copy this file.
| Is this a system file or could it be used for some malicious keylogging
| program?

No. You can't open it because the File Handle is held open by the OS.

 

[Wesley Vogel]

No. It's part of the registry.

Do NOT delete it.

%systemroot%\SYSTEM32\CONFIG\SOFTWARE.LOG is the HKEY_LOCAL_MACHINE\SOFTWARE
hive.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In