Red Dot in Taskbar: "Your Activity is Recorded"

[Guest]

Hi,

I have a red dot in my taskbar which says "Your activity is recorded" when I
pass my mouse over it. When I click it, a window appears asking for my
password. I think my son downloaded some type of keylogger program and can't
remember this password. We don't know how to uninstall it. Can anyone please
help?

Thanks!

Sharon

 

[Claymore]

Hi,

I have a red dot in my taskbar which says "Your activity is recorded" when I
pass my mouse over it. When I click it, a window appears asking for my
password. I think my son downloaded some type of keylogger program and can't
remember this password. We don't know how to uninstall it. Can anyone please
help?

Thanks!

Sharon

Hello Sharon,

Your antivirus program should pick this up. Do this first, if you
haven't done so already.
Or, go to Start => Run and type in "msconfig" {without the quotes}
Look in the Startup tab for anything that looks like the program. It
may give you the path to the program's executable. Uncheck its box. If
you've got the right one, delete the executable.

Or, you can download this:
http://www.silentrunners.org/

Post the resultant log file here.

 

[Patrick Keenan]

Hi,

I have a red dot in my taskbar which says "Your activity is recorded" when
I
pass my mouse over it. When I click it, a window appears asking for my
password. I think my son downloaded some type of keylogger program and
can't
remember this password. We don't know how to uninstall it. Can anyone
please
help?

Thanks!

Sharon

If you google "red dot your activity is recorded" you'll find a number of
responses on this, including a hint that this can be a feature of some
parental control software, particularly from a product called PC-Pandora
(www.pcpandora.com). It asks for the password because it's offering the
administrative user - only - access to the recorded logs.

Yes, this is technically a keylogger. But because it can be from a
"legitimate" source, deliberately installed parental control software, many
A/V and security apps may explicitly ignore it.

So, you need to investigate further to see what is actually running.
msconfig can help, as can Process Explorer.

http://www.microsoft.com/technet/sysinternals/utilities/processexplorer.mspx

HTH
-pk