(adsbygoogle = window.adsbygoogle || []).push({}); Is there any way to differentiate between an actual virus and a false positive on a .exe keygen?

Seen a lot of your posts around here, you seem to know your shit. Yeah, that program is good. Another one is keyscrambler, used it before but never tested it.

Ok, btw does that work on FUD Keyloggers? :\
And, iStealer is diffrent than Keylogger. When you run the stealer, it sends victims passwords to you. Its not "active"

yes this works on FUD, the program does not delete any keylogger it does not even detect them.
it just makes the logging of the keys impossible, keyloggers wont record anything.
so just be sure that you dont forget to enable the program before typing any sensetive stuff like passwords.

Cool sounds good! :y:

Well I just check my processes.... keylogger will show there :p

Infact, KIS - Kaspersky Internet Security - has some detection system. Sometimes games are detected as a keylogger but of course it is a false positive. I think it just detects the executable's actions so some sort of Heuristic detection, so I think regardless of it being full undetectable from other scanning techniques would KIS not detect it because of it's actions? Not sure if you have used it but I'm currently using it and have for the past 6 or so months.

---------- Post added at 04:38 PM ---------- Previous post was at 04:37 PM ----------



Not necessarily, it is very very easy to hide an executable from task manager.

Then I type netstat -b or netstat -n in cmd, it will show all active connections to me :black:

hm im not sure of what your question is..:embarrassed:
could you try to ask it in another sentence :p?

and youre right about the hiding executables from task manager..:y:
most are showen in task manager but under names like svhost.exe or explorer.exe so people that do not know anything about it wont recognize but they can also be invisible.,

I'm almost certain that Kaspersky, the antivirus software uses some sort of detection system that detects the executables behavior. Like how a keylogger records keystrokes, it will monitor what it is doing and if it detects it, then it will flash it up. Although there is AV killing codes but I'm not exactly sure what happens when they are implemented. What do you think?

hmm im not sure... it could be...
i dont use anti virus because it deletes files i want to keep :p

AV killers in my experience is just ending procceses of the anti virus and an check every second to see if they are enabled again so it can close it again..
also an easy way to check is your infected is just look if your built-in windows fire wall is still enabled, if it is not and it was before without you turning it off yourself you can be sure your infected ;o