January 20th, 2002
|
Novicius | | Join Date: January 20th, 2002
Posts: 4
| |
Securiy Issue: Limewire installs KeyboardProc keyboard hook My investigation shows that the Basic (dunno about professional) installs a KeyboardProc hook. Can anyone else verify this? There should be no reason for LimeWire sniffing keyboard strokes while it is running; It should be able to use standard windows API for keyboard.
In fact, since it is Java based, the win32 native code is the only part that could install the hook!
What are they using our keystrokes for? I can verify the addition of the keyboard hook upon execution, and removal upon exit so I know it is LimeWire and not some trojan on my workstation (which I am good at keeping clean).
Ideas?
--g33k |