Samsung Meletakkan Keyloggerr Dalam Notebook?

[kakasih 6]

Informasi dari Network World.

Samsung memasang program Key loggin didalam notebook produk terbarunya. Penemuan dari Mohamed Hassan memiliki gelaran Master of Science in Information Assurance dari Universiti Norwich .

Mohamed menemui satu aplikasi yang disebut StarLogger, dan disimpan pada directory C:\Windows\SL\

Setelah di selidiki lebih lanjut, software tersebut mencatat kegiatan penguna computer. Seperti tulisan yang di taip, email, dokumen serta user password.

Teknik tersebut seperti langkah SonyBMG, memasang rootkits.

Tetapi divisi support Samsung membantah telah memasang software tersebut.

Penyelidikan berlanjut dengan 2 model berbeda dan memang ada software seperti itu.

Pihak Samsung menolak pemasangan tersebut dilakukan oleh Samsung. Samsung adalah perusahaan pembuat hardware dan bukan software.

2 model notebook yang ditemukan software StartLogger terdapat pada notebook Samsung R525 dan R50.

Dari Cnet mempublikasikan bagaimana membuang software tersembunyi tersebut.. Ada 2 model computer diketahui tertanam software Keylogger, model paling baru menurut Cnet masih bersih.

Untuk me-remove Starlogger
Buka Regedit
Cari kata "winsl"
Akan terlihat informasi dibawah ini, artinya ada software StarLogger aktif pada computer
HKEY_LOCAL_MACHINE\software\microsoft\windows\curr entversion\run\winsl

Periksa di Task Manager untuk software WinSLManager.exe dan Delete file tersebut
Langkah ke 2, unregister program StarLogger DLL .
Buka command prompt dan temukan file dengan nama WinSLH.dll
Ketik regsvr32 /u WinSLH.dll
Pastikan muncul pop up dari Windows bahwa software tersebut sudah di unregister


[url=http://news.cnet.com/8301-27080_3-20048896-245.html]sumber
[/url]

[hampeh 21]

[quote][b]Samsung keylogger false-positive; VIPRE maker apologizes [/b]

This week, Mich Kabay and Mohamed Hassan published in this space the appearance of a keylogger on Samsung's laptops, which since has been found to be a likely false-positive caused by the antivirus software Hassan ran on the laptops. Here's an update.

Samsung has issued a statement saying that the finding is false. The statement says the software used to detect the keylogger, VIPRE, can be fooled by Microsoft's Live Application multi-language support folder. This has been confirmed at F-Secure and other publications, including here and here.

GFI Labs, the maker of VIPRE, has issued an explanation and apology for generating the false positives that led to these articles: "We apologize to the author Mohamed Hassan, to Samsung, as well as any users who may have been affected by this false positive." [/quote]

http://www.networkworld.com/newsletters/sec/2011/040411sec1a.html

tapi, masih ada lagi siasatan lanjut oleh pakar forensic untuk mengesahkan kebenaran cerita nih.

[Tempus 17]

tu pasal tiap kali beli laptop baru.walaupun original software aku terus format install yang version aku sendiri.software diroang macam2 ada.satu tools expired dia punya alert hari2 keluar.

[hampeh 21]

[b]Samsung laptops clean: [size="5"]No keylogger or spyware of any kind found[/size]
[/b]

[quote]Network World columnist Mich Kabay requested that the Norwich University center for Advanced Computing and Digital Forensics perform a complete, unbiased investigation of the events leading up to the publication of the allegation that some Samsung computers contained a keylogger called StarLogger. I agreed to do that under the condition that Dr. Kabay and Samsung not be part of the investigation. In my view it is necessary to separate the facts of the issue so that they may be analyzed critically using appropriate technology. Both agreed with minor exceptions that I will note in this report. [/quote]

[quote][b]Therefore, I conclude that the two Samsung R540 laptops are free from spyware and keyloggers and that the reported presence of StarLogger was a false alarm. [/b][/quote]


http://www.networkworld.com/newsletters/sec/2011/040411-sec-stephenson.html

Kepada pemilik2 laptop samsung, tak perlu risau apa2, takde pun apa2 yang bahaya.