Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Pc Tattletale


  • Please log in to reply
3 replies to this topic

#1 Monty007

Monty007

  • Members
  • 1,151 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Australia
  • Local time:11:46 PM

Posted 11 March 2007 - 07:56 PM

Hi everyone need a bit of help with this one. My antispyware progam picked up this key logger PC Tattletale , this was the report (This application is a Spyware keylogger capable of capturing keystrokes and thereby recording passwords, logins, confidential e-mails, and any other typed information. PCTattletale can log all keystrokes and take screenshots of the users desktop. PCTattletale may be used as a legitimate monitoring tool, but can easily be used as invasive spyware.)
Know I know of the program called PC Tattle tale which is a parental control & monitoring software but I dont know about this keylogger if they are linked. I have not installed any software of this nature on my pc. The file is located in windows/system32 folder and can not be deleated even in safe mode. I also ran a Highjackthis but could not see anything.
Any help would be appreciated.
:thumbsup:
MCP
MSDST

BC AdBot (Login to Remove)

 


m

#2 buddy215

buddy215

  • BC Advisor
  • 12,612 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:08:16 AM

Posted 11 March 2007 - 09:16 PM

Hey Monty---Which program picked this up? Try AVG 7.5 Antispyware in safe mode. Unless that was the program you used. Have you looked in Add/Remove programs for anything suspicious?
According to Symantec the program must be manually installed. Check the link below for file names and locations and see if they match those on your computer. Some of those file names I recognize as legitimate file names, also.
http://sarc.com/avcenter/venc/data/spyware.pctattletale.html



http://free.grisoft.com/doc/avg-anti-spywa...e/lng/us/tpl/v5

Edited by buddy215, 11 March 2007 - 09:29 PM.

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss

A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”


#3 Monty007

Monty007
  • Topic Starter

  • Members
  • 1,151 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Australia
  • Local time:11:46 PM

Posted 11 March 2007 - 10:19 PM

Hi buddy, thanks for the reply. 1: i ran the scan in normal and safe mode but it still remains after boot up. 2: Followed the instructions to deleate in regedit but it does not seem to be in the run key as discribed. I have 3 spyware programs Windows Defender, Superanti-spyware and xoftspy which is the only program that is picking it up. Avast anti virus does not see it either.
MCP
MSDST

#4 buddy215

buddy215

  • BC Advisor
  • 12,612 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:08:16 AM

Posted 11 March 2007 - 10:25 PM

I think it is a false positive. Don't you? There should of been a lot more than just one file-one location. Especially if the computer has always been in your possession and Symantec stating it has to be manually installed.

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss

A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users