keyboard loggers.

John Young jya at pipeline.com
Tue Dec 19 08:13:52 PST 2000


Somebody wrote in response to Bill Stewart's message:

  At least under Windows 98 you can "Start", "Programs", 
  "Accessories", "System Tools", "System Information", and 
  list the "System Hooks".  Most keyboard sniffers are 
  installed as "hooks".  If you see a new one, you may 
  have a problem.


Here's what a JYA machine shows (sorry if the table wraps):

Hook type      Hooked by      Application    DLL
path                                                           Application
path
____________________________________________________________________________
____________________________________________________

Keyboard       Wbhook32.dll   WEBSCANX.EXE   C:\PROGRAM FILES\NETWORK
ASSOCIATES\MCAFEE VIRUSSCAN\Wbhook32.dll  Same as DLL path
CBT            Pgphk.dll      PGPTRAY.EXE   
C:\WINDOWS\SYSTEM\pgphk.dll                                       
D:\PGP658\PGPTRAY.EXE                                              
Mouse          Wbhook32.dll   WEBSCANX.EXE   C:\PROGRAM FILES\NETWORK
ASSOCIATES\MCAFEE VIRUSSCAN\Wbhook32.dll  Same as DLL path

Surely Network Associates/PGP have no connection to the 
snoopers, but why scan keyboard and mouse?







More information about the cypherpunks-legacy mailing list