Some HP machines have a keylogger installed with the Audio Driver

Page 1 of 3 123 LastLast
    Some HP machines have a keylogger installed with the Audio Driver

    Some HP machines have a keylogger installed with the Audio Driver


    Last Updated: 21 Jul 2019 at 20:00

    HP is quite well-known for its pre-installed software on its laptops and PCs, as with most OEMs, however, while we’ve become accustomed to dealing with pre-installed software (and the process of removing it on a freshly-purchased computer), HP appears to be overstepping its mark by installing a keylogger with the audio driver on some of its laptops (via Bleeping Computer).

    The keylogger, packaged with the Conexant HD Audio Driver Package in version 1.0.0.46 and earlier, has been discovered by researchers. With this audio driver comes a file, MicTray64.exe (or MicTray.exe for non-64-bit users), which has a Scheduled Task to run each time the user logs-on to their machine. Essentially, each time a key on the keyboard is pressed, it records it. The keystrokes are then stored in a plaintext file – definitely not a secure way of storing every key pressed on a machine.

    The keystroke log is stored at C:\users\public\MicTray.log.

    This file can be accessed by other users of the machien or, potentially more worrisome, by any program installed on the computer. Additionally, should the file not exist, it will instead pass the keystrokes to an API named OutputDebugString. This API can then be used by programs, with or without malicious intent, to view the keystrokes directly, in real-time.

    So far, 28 models released by HP are known to be affected. Investigators looking into the security issue have not ruled out the potential for other models, and other manufacturers, to also be affected. The following are the known models affected:


    Read more: Some HP machines have a keylogger installed with the Audio Driver, heres how to disable it | On MSFT
    Brink's Avatar Posted By: Brink
    11 May 2017


  1. Posts : 61,909
    64-bit Windows 11 Pro for Workstations
       #1

    My HP Envy notebook YDF94AV had this log file.
      My Computers


  2. Posts : 725
    Windows 10 Home - Version 21H1- Build 19043.1266
       #2

    I have Realtek High Definition Audio so this would not affect me right? I don't see the log either.
      My Computers


  3. Posts : 343
    Windows 10 x64 Pro 21H2
       #3

    Seems only Conexant devices are affected... according to some sources Realteck is out of this...
    I wonder, why they do this?
      My Computers


  4. Posts : 353
    Windows 10 Pro
       #4

    I do wonder what possible explanation there is for this, perhaps their excuse will be ''oh well Windows 10'' does it, so why complain ?
      My Computer


  5. Posts : 384
    Window 10
       #5

    zooburner said:
    I do wonder what possible explanation there is for this, perhaps their excuse will be ''oh well Windows 10'' does it, so why complain ?
    Windows 10 does this? Please explain what you mean.
      My Computer


  6. Posts : 61,909
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       #6

    Windows 10 does not log your key strokes.
      My Computers


  7. Posts : 343
    Windows 10 x64 Pro 21H2
       #7

    PJLLB said:
    Windows 10 does this? Please explain what you mean.
    lol... he means the early beta versions of build 10240 (IIRC, maybe was an earlier build), they had a "keylogger"... that was nothing but a telemetry thing to evaluate the users and their issues with the OS...

    That myth was burried since the final revision... they only have the telemetry tools, that gets important kernel information to see how to fix issues in the OS... personally, that is disabled on my system not because of privacy, but to high CPU and HDD usage, that sometimes renders the system unusable for important tasks...
      My Computers


  8. Posts : 384
    Window 10
       #8

    FerchogtX said:
    lol... he means the early beta versions of build 10240 (IIRC, maybe was an earlier build), they had a "keylogger"... that was nothing but a telemetry thing to evaluate the users and their issues with the OS...

    That myth was burried since the final revision... they only have the telemetry tools, that gets important kernel information to see how to fix issues in the OS... personally, that is disabled on my system not because of privacy, but to high CPU and HDD usage, that sometimes renders the system unusable for important tasks...
    Not a laughing matter if this myth is being perpetuated. Thanks for the confirmation Brink. I knew that to be the case but needed to ask the question to get the truth out there.
    Last edited by PJLLB; 12 May 2017 at 14:11.
      My Computer

  9.   My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 10:03.
Find Us




Windows 10 Forums