Overclock.net › Forums › Mobile Computing Forum › Laptops and Netbooks › SAMSUNG KEYLOGGER UPDATE: looks like BS
New Posts  All Forums:Forum Nav:

SAMSUNG KEYLOGGER UPDATE: looks like BS - Page 9

post #81 of 100
Hi all, I have just bought a samsung sf310 this week, my laptop also has this directory and SL folder. I am currently downloading the clean ISO posted a few pages back and am reading through the starlogger removal instructions posted above.

Before I do a complete format and re-install im going to test a few more scanners to see if anything can pick it up. Luckily I have not used my laptop to access anything important yet.

I would like to thank everyone who has contributed to this thread, it has put my mind at ease since first hearing about this last night.

I wonder how Samsung will react to this, surely there is some sort of legal case here?



EDIT: Ok after reading the article on how to find and manually remove it, I cannot find the .exe running on my system, or the registry entry. I DO have the folder, as shown by q6600nut in his screenshot above.

Im going to let my scanners finish running to see if they can find anything. Im going to wipe and do a clean install anyway because I cant get rid of some of the samsung crapware that came with the laptop, that and im now extremely paranoid.

I've ordered a samsung external HDD, I guess i'll be formatting that as soon as it arrives too.
Edited by Mach 5 - 3/31/11 at 2:39am
My System
(13 items)
 
  
CPUMotherboardGraphicsRAM
i5 760 @ stock will update when I get home EVGA GTX 470 @ stock 4GB G-Skill DDR3 
OSKeyboardMouse
Windows 7 Saitek Eclipse (Blue) Roccat Kone (now broken) 
  hide details  
Reply
My System
(13 items)
 
  
CPUMotherboardGraphicsRAM
i5 760 @ stock will update when I get home EVGA GTX 470 @ stock 4GB G-Skill DDR3 
OSKeyboardMouse
Windows 7 Saitek Eclipse (Blue) Roccat Kone (now broken) 
  hide details  
Reply
post #82 of 100
Quote:
Originally Posted by q6600nut View Post
PICS


Thanks for posting confirmation that your PC came with Windows Live Photo Gallery.

You're supposed to be looking for an ACTUAL keylogger:

Quote:
Originally Posted by StarLogger
iv.ini
WinSL.dat
WinSL.exe
WinSLH.dll
ImgView.exe
SL-Test.txt
unins000.dat
unins000.exe
StarLogger.url
WinSLManager.exe
StarLogger.url
Uninstall StarLogger.lnk
StarLogger.lnk
StarLogger on the Web.lnk
WinSLManager.exe
WinSLH.dll
WinSL
Black 2012
(18 items)
 
  
CPUMotherboardGraphicsRAM
Intel i5 2500k Stock Asrock Z77 Extreme3 Motherboard XFX AMD Radeon HD 6850 16GB (4x4gb) G. Skill Sniper 1333mhz 
Hard DriveHard DriveHard DriveHard Drive
Crucial M4  Western Digital Caviar Black Western Digital Elements Seagate Barracuda 6GB/s 
Optical DriveCoolingOSKeyboard
LG Lightscribe 22x DVD RW R+ R- Noctua NH-D14 Windows 7 Professional x64 Logitech G11 
PowerCaseMouseMouse Pad
Seasonic 750w Gold Fractal Design R4 (Windowed) Logitech G5 Ratpadz GS 
AudioAudio
Bose Companion 2 Sennheiser HD280 Pro 
  hide details  
Reply
Black 2012
(18 items)
 
  
CPUMotherboardGraphicsRAM
Intel i5 2500k Stock Asrock Z77 Extreme3 Motherboard XFX AMD Radeon HD 6850 16GB (4x4gb) G. Skill Sniper 1333mhz 
Hard DriveHard DriveHard DriveHard Drive
Crucial M4  Western Digital Caviar Black Western Digital Elements Seagate Barracuda 6GB/s 
Optical DriveCoolingOSKeyboard
LG Lightscribe 22x DVD RW R+ R- Noctua NH-D14 Windows 7 Professional x64 Logitech G11 
PowerCaseMouseMouse Pad
Seasonic 750w Gold Fractal Design R4 (Windowed) Logitech G5 Ratpadz GS 
AudioAudio
Bose Companion 2 Sennheiser HD280 Pro 
  hide details  
Reply
post #83 of 100
Quote:
Originally Posted by SkillzKillz View Post
Thanks for posting confirmation that your PC came with Windows Live Photo Gallery.

You're supposed to be looking for an ACTUAL keylogger:
That's the said folder where the keylogger was suppose to be... I don't see it in my samsung laptop too...
Teh computer
(13 items)
 
  
CPUMotherboardGraphicsRAM
Q8400 MSI MS-7529 HIS icoolerIV 5750 1GB @ 822/1250 Corsair DDR2 2x2 gig 
Hard DriveOSMonitorPower
500 gig HDD SATA @ 7200 rpm Windows 7 32 bit / Ubuntu 10.10 32 bit AOC 22" WLED 1680x1050 Aywun 480W 
Case
Gigabyte gz-x4 
  hide details  
Reply
Teh computer
(13 items)
 
  
CPUMotherboardGraphicsRAM
Q8400 MSI MS-7529 HIS icoolerIV 5750 1GB @ 822/1250 Corsair DDR2 2x2 gig 
Hard DriveOSMonitorPower
500 gig HDD SATA @ 7200 rpm Windows 7 32 bit / Ubuntu 10.10 32 bit AOC 22" WLED 1680x1050 Aywun 480W 
Case
Gigabyte gz-x4 
  hide details  
Reply
post #84 of 100
My dad just bought a new samsung 'R' laptop. I'll be checking his tonight.
post #85 of 100
http://www.engadget.com/2011/03/31/s...n-r525-privac/

Is just a mistake.

"Samsung's official Korean language blog, Samsung Tomorrow, has a posted an update calling the findings false. According to Samsung, the confusion arose when the VIPRE security software mistakenly identified Microsoft's Slovene language folder ("SL") as Starlogger, which Sammy was able to recreate from an empty c:\\windows\\SL folder (see image above). So yeah, move along, it's much ado about nothing -- the R525 and R540 laptops are perfectly safe. "
post #86 of 100
Something still seems fishy.

Quote:
On March 1, 2011, I called and logged incident 2101163379 with Samsung Support (SS). First, as Sony BMG did six years ago, the SS personnel denied the presence of such software on its laptops. After having been informed of the two models where the software was found and the location, SS changed its story by referring the author to Microsoft since "all Samsung did was to manufacture the hardware." When told that did not make sense, SS personnel relented and escalated the incident to one of the support supervisors.

The supervisor who spoke with me was not sure how this software ended up in the new laptop thus put me on hold. He confirmed that yes, Samsung did knowingly put this software on the laptop to, as he put it, "monitor the performance of the machine and to find out how it is being used."
Assuming that it really is Microsoft Slovene language pack, why would the supervisor provide the above excerpt?
post #87 of 100
Way to go vipre software; picking up a false positive on a windows folder.
Even though its not a thread I wouldnt trust the images that manufacturers put on their laptops:
Quote:
reportedly, a supervisor informed Mr. Hassan (after an earlier denial) that the company did indeed install the software at the factory in order to "monitor the performance of the machine and to find out how it is being used."
edit: Ninja'd
post #88 of 100
Did you make sure to show hidden files in your folder options?
Phantom
(25 items)
 
  
CPUMotherboardGraphicsGraphics
AMD FX 8320 Asus Crosshair Formula V EVGA GTX 660 Sig 2 EVGA GTX 660 Sig 2 
RAMHard DriveHard DriveHard Drive
G.Skill 8 GBs DDR3 Seagate Samsung OCZ Solid 3 
Hard DriveOptical DriveCoolingCooling
OCZ Solid 3 Samsung DVD RW with Lightscribe XSPC Dual bay pump/res XSPC Delta V3 CPU Block 
CoolingCoolingCoolingOS
Phobya Compression Fittings Black Ice Xtreme II 240mm Radiator Koolance BKT-HX001 Radiator Mounting Bracket Various versions of Linux 
OSMonitorMonitorKeyboard
Windows of some sort Acer 27" LED LCD  Samsung 19" LCD Saitek Cyborg 
PowerCaseMouseAudio
HEC 1080 800 watt NZXT Phantom Logitech M570 Wireless Trackball Philips AmBX Complete System 
Audio
Creative Omni Sound Blaster USB 
  hide details  
Reply
Phantom
(25 items)
 
  
CPUMotherboardGraphicsGraphics
AMD FX 8320 Asus Crosshair Formula V EVGA GTX 660 Sig 2 EVGA GTX 660 Sig 2 
RAMHard DriveHard DriveHard Drive
G.Skill 8 GBs DDR3 Seagate Samsung OCZ Solid 3 
Hard DriveOptical DriveCoolingCooling
OCZ Solid 3 Samsung DVD RW with Lightscribe XSPC Dual bay pump/res XSPC Delta V3 CPU Block 
CoolingCoolingCoolingOS
Phobya Compression Fittings Black Ice Xtreme II 240mm Radiator Koolance BKT-HX001 Radiator Mounting Bracket Various versions of Linux 
OSMonitorMonitorKeyboard
Windows of some sort Acer 27" LED LCD  Samsung 19" LCD Saitek Cyborg 
PowerCaseMouseAudio
HEC 1080 800 watt NZXT Phantom Logitech M570 Wireless Trackball Philips AmBX Complete System 
Audio
Creative Omni Sound Blaster USB 
  hide details  
Reply
post #89 of 100
If its a mistake and a false positive, why did they admit to putting it on there to "monitory performance and use" (according to the article posted in the news section).

Scanners turned up nothing and I cant find any trace of the keylogger in the registry, however after all this im still unsure so I will be wiping my HDD and doing a clean install from the ISO linked a few pages back - in reality I probably should have done this anyway.
My System
(13 items)
 
  
CPUMotherboardGraphicsRAM
i5 760 @ stock will update when I get home EVGA GTX 470 @ stock 4GB G-Skill DDR3 
OSKeyboardMouse
Windows 7 Saitek Eclipse (Blue) Roccat Kone (now broken) 
  hide details  
Reply
My System
(13 items)
 
  
CPUMotherboardGraphicsRAM
i5 760 @ stock will update when I get home EVGA GTX 470 @ stock 4GB G-Skill DDR3 
OSKeyboardMouse
Windows 7 Saitek Eclipse (Blue) Roccat Kone (now broken) 
  hide details  
Reply
post #90 of 100
If you can't find the .exe, can't find any of the other starlogger-related folders, can't find the running processes, and can't find the registry entries that I mentioned in my previous post, then you don't have it. If it is, indeed, preinstalled before you buy the laptop, then it will have the same appearances and attributes as was originally claimed by the guy who started this and originally contacted Samsung. If not, then you don't have it, and the "sl" folder has nothing to do with starlogger, and it's just a coincidence. That's why I suggested manually searching in the first place. Oversensationalism ftl.

It's still interesting how this went from a guy claiming to him that Samsung admitted that they knew of and intentionally installed starlogger for monitoring usage/gathering info, to now the official stance of samsung is that the initial findings were that of the vipre scanner mis-identifying a folder. Apparently Vipre (never heard of it until now) only found and flagged a folder--not an application??? This is lame.

Either the OP or a mod should edit the original post, providing an update that this was all a misunderstanding.
    
CPUMotherboardGraphicsRAM
i5-2500K Biostar TP67B+ XFX HD5750 1GB 2x4GB DDR3 Corsair 1600 
Hard DriveOSMonitorPower
60GB OCZ SSD, 2x160GB HDD RAID0, 500GB+500GB+1.5TB Windows 7 Ultimate 64-bit Samsung SyncMaster 930B Antec SmartPower 450w 
Case
Antec 900 
  hide details  
Reply
    
CPUMotherboardGraphicsRAM
i5-2500K Biostar TP67B+ XFX HD5750 1GB 2x4GB DDR3 Corsair 1600 
Hard DriveOSMonitorPower
60GB OCZ SSD, 2x160GB HDD RAID0, 500GB+500GB+1.5TB Windows 7 Ultimate 64-bit Samsung SyncMaster 930B Antec SmartPower 450w 
Case
Antec 900 
  hide details  
Reply
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Laptops and Netbooks
Overclock.net › Forums › Mobile Computing Forum › Laptops and Netbooks › SAMSUNG KEYLOGGER UPDATE: looks like BS