Page 1 of 2 12 LastLast
Results 1 to 10 of 17

Thread: Protexis.MOD

  1. #1
    Junior Member
    Join Date
    Dec 2007
    Posts
    2

    Default Protexis.MOD

    Spybot detected Protexis.MOD on my computer. I let Spybot fix it, but can someone give me any more details about this keylogger? Where does it come from? What does it do besides capture keystrokes ( I assume for banking websites, etc)? How can I tell if it got anything off my computer?

  2. #2
    Junior Member
    Join Date
    Dec 2007
    Posts
    1

    Default Seconded

    I have no idea but I second your question. The directories in question -- C:\ProgramData\Protexis , C:\ProgramData\Protexis\DL and C:\ProgramData\Protexis\State -- were all empty. A Google search returned only a small number of hits -- none very enlightening.

  3. #3
    Junior Member vsparky's Avatar
    Join Date
    Sep 2007
    Location
    Scottsdale
    Posts
    1

    Default

    Quote Originally Posted by seekaybee View Post
    I have no idea but I second your question. The directories in question -- C:\ProgramData\Protexis , C:\ProgramData\Protexis\DL and C:\ProgramData\Protexis\State -- were all empty. A Google search returned only a small number of hits -- none very enlightening.
    me too ...exactly

    anyone?
    Last edited by tashi; 2007-12-21 at 02:24. Reason: Commercial signature removed, as per faqs.

  4. #4
    Senior Member honda12's Avatar
    Join Date
    Nov 2007
    Location
    UK
    Posts
    682

    Default

    hmm this may just be a coincidence, but spybot just happened to detect the same keylogger today when I scanned!

    Merry Christmas
    -honda12

  5. #5
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,483

    Default

    As the topic is getting longer, I have moved it to the false positives forum (just in case), and will bring to the attention of a detective.
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

  6. #6
    Senior Member Yodama's Avatar
    Join Date
    Oct 2005
    Location
    Buchenheim
    Posts
    1,110

    Default

    hello,

    it appears that Protexis is the publisher of the qwertystudio MOD Keylogger while qwertystudio is the actual vendor. Since it is safe to assume that Protexis also publishes other software we will consider the Protexis folders as false positives. The Keylogger will also be renamed to Qwertystudio.MOD . This will take effect with the update scheduled for next wednesday .
    born in the shadow to die in the shadow, that is the fate of the shinobi

    Spybot S&D Downloads

    Please help us improve Spybot and download our distributed testing client.

  7. #7
    Junior Member
    Join Date
    Dec 2007
    Posts
    2

    Default protexis.mod

    There was actually a file in the Protexis folder on my computer before Spybot removed it. The file looked like it had a randomly generated number for a name with a .plf extension. Would this make any difference as far as actually being malware or not?

    Does anyone know what the keyloggers from each vendor log? Does someone know if this file came from the publisher Protexis or qwertystudio? Sorry about so many questions, but I would like to know as much as possible about this file since it was found on my computer. I'd like to know what it did or what it possibly could do because I didn't install anything from Protexis or qwertystudio unless it came bundled with something else.

    Thanks for any help.

  8. #8
    Senior Member Yodama's Avatar
    Join Date
    Oct 2005
    Location
    Buchenheim
    Posts
    1,110

    Default

    There was actually a file in the Protexis folder on my computer before Spybot removed it. The file looked like it had a randomly generated number for a name with a .plf extension. Would this make any difference as far as actually being malware or not?
    This file does not appear to be harmful, the Protexis folder appear to be created with all softwares which get promoted/published by Protexis (making it some kind of bundling).

    The QwertyStudio.MOD Keylogger only loggs keystrokes, it does not appear to have advanced features like making screenshots.

    You most likely have a software installed that was promoted/published via Protexis, if you are unsure if there may be some harmful software involved you can create a Spybot S&D or Runalyzer log and sent it do us for analysis.
    born in the shadow to die in the shadow, that is the fate of the shinobi

    Spybot S&D Downloads

    Please help us improve Spybot and download our distributed testing client.

  9. #9
    Junior Member
    Join Date
    Dec 2006
    Posts
    8

    Default My Protexis.MOD Issue

    Well.. spybot has been catching it alot of times. So i made a runanalyzer log.
    Please check it out.

    HIJ is attached

  10. #10
    Junior Member
    Join Date
    Dec 2007
    Posts
    1

    Default

    Spybot detected this virus on my computer as well...

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •