View Single Post
  #1 (permalink)  
Old January 20th, 2002
g33kb0y g33kb0y is offline
Novicius
 
Join Date: January 20th, 2002
Posts: 4
g33kb0y is flying high
Default Securiy Issue: Limewire installs KeyboardProc keyboard hook

My investigation shows that the Basic (dunno about professional) installs a KeyboardProc hook. Can anyone else verify this? There should be no reason for LimeWire sniffing keyboard strokes while it is running; It should be able to use standard windows API for keyboard.

In fact, since it is Java based, the win32 native code is the only part that could install the hook!

What are they using our keystrokes for? I can verify the addition of the keyboard hook upon execution, and removal upon exit so I know it is LimeWire and not some trojan on my workstation (which I am good at keeping clean).

Ideas?

--g33k
Reply With Quote