Sign in to follow this  
ZZZ7

Keylogger option

Recommended Posts

keyboard.exe is trusted automatically (either by the whitelist or in OASIS) because it's known to be safe. If you locate keyboard.exe in the Program's list and then click the Untrust button to make it Unknown and repeat the test you should see the alerts :)

Share this post


Link to post
Share on other sites

If you look in the Programs list in OA, you should see an entry for keyboard.exe (you'll need to untick "Hide Trusted"). You can Untrust it from here.

OASIS is an online database that OA contacts to check program ratings. You can read more about it here http://www.emsisoft.com/en/info/oa/KF-OASIS.html

It's not in the Programs list anywhere..........but ''keyboard.exe'' seems to be a pretty generic name to blindly allow it?

Anyway thx for the info.

Share this post


Link to post
Share on other sites

OA doesn't trust programs based on their name. The hashes or digital signatures of known safe programs are trusted and OA checks for this when you execute a program.

If you go to the History section in OA, you should see a green entry there somewhere that says something like "Program Guard: keyboard.exe". If you click on it, you'll see a program path hyperlink in the pane below. If you click this hyperlink it will take you directly to the Program's entry in the Program's list (you need to again make sure "Hide Trusted" is unticked in the Program's section before you do this).

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.