Ardamax keylogger - a comercial keylogger wrong understand by some idiots witch has many free time to play with that kind of software, it isn’t detected by boclean. Here at may work , some coleags lost their password for yahoo messenger, because some idiots installed without nottice this keylogger in their computers. They have Kaspersky AV V 6.0 and did’nt know of that keylogger. I use Nod 32 and this AV didn’t allow me even download this keylogger from oficial site. I’l thank you if you introduce this version in Boclean Definitions.
Hey razor74
I am sure Comodo will add it The normal procedure to submit infected files is :
Email the file to: malwaresubmit [ at ] comodo.com .
Specify in the subject line “Infected”.
Zip and password protect it with “infected” and include that information in the body.
But in this case I think an email with a link to the website and an explanation will do fine Ow, and please don’t post the link here. Although it is easy to find, it is against forum policy to post it
Greetz, Red.
Hello. i send it. The file is an installer and is disponible on their web site at www .ardamax.com
Edited with spaces so as not to be a direct link.
Thanks for your submission, understand it may not be added because it is in fact a commercial keylogger. Only way to know for sure though is to wait while the Comodo Analysts look at it.
But previous versions it’s in Boclean list :). This kind of software could be very dangerous in wrong hands… With this keylogger you can steal anything typed on the keyboard on target computer, not only monitoring everything.
I never have understood the thinking that if someone pays for a keylogger it is suddenly legitimate. I think vendors should definitely include detection of any and all commercial monitoring software, especially in the home use versions of the anti-malware software. Corporate versions might be different. Network managers running BOClean could always add their monitoring program to the excludes list, as could parents. But the fact remains that unsuspecting home users need protection from monitoring software, paid for or not.
I agree with fracTure
Greetz, Red.
I just did a database search and I see that Ardamax Keylogger is detected by SpyCop, along with 636 other commercially available monitoring programs.
“SpyCop is the leading commercial computer monitoring/surveillance spy software detector. Spy programs are often used by identity thieves and many times even family members, to gain access to your private personal or business information. SpyCop is not just another anti-spyware program, it’s a surveillance spy detector that specifically targets commercially available computer monitoring software.”
http://www.spycop.com/faq.htm#Download
This is what SpyCop is designed for, and why I keep it on my machines. When people knock SpyCop for not having a huge database, I know right away that they are failing to see the niche market that SpyCop covers.
“Unlike many competitors, SpyCop does not attempt to be a jack of all trades (and master of none). We focus on the detection of commercial computer monitoring spy programs and do it better than anyone else!”
SpyCop also offers “a full year money back guarantee if SpyCop doesn’t do everything we say!”.
I hate to sound like a commercial, but I want to help the OP. Anti-malware programs like MBAM and SAS both fail to detect commercial keyloggers. One developer says, “detecting legit products is not the job of an anti-malware application”. The other says, “we don’t detect and remove generic keyloggers as lots of businesses use those…. When we put in a few of the common commercial ones, we got quite a bit of flack from our corporate users.”
This is a bad thinking, as far as I’m concerned. And as I stated before, I am puzzled by it, and wish these developers would change their approach. Their products ARE NOT protecting users from threats as long as this gaping hole exists. If one accepts the broad definition of spyware as “programming that gathers information about a computer user without permission”, then tell me why these guys fold when it comes to commercially available spy programs?
I looked at the ardamax website via ie7 ran a spyware doctor scan result 28 infections (temporary files).
Did the same via opera 9.27 result zero. Hmm won’t be visiting that page again. By the way mcafee sa states this site as clean.
I too would like BOClean to detect this keylogger.
I only did a very quick and short check, and it looked to me that BOClean (2008-06-09 14:16:41) did not detect it.
Sorry, I did not take much time to look at it.
SpyCop, only quickly checking the Program Files folder on XP, did detect AKV.exe and PDM.exe.
I’m thinking about sending Kevin an email
I think that it is now detected with the defs 2008-06-10 12:21:41
06/11/2008 01:29:07: RSK-ARDAMAX.SAF VARIANT STOPPED BY BOCLEAN!
Trojan horse was found in memory.
C:\PROGRAM FILES\PDM\PDM.EXE contained the trojan.
Active trojan horse WAS shut down. System safe.
06/11/2008 01:32:22: RSK-ARDAMAX.SAF.001 VARIANT STOPPED BY BOCLEAN!
Trojan horse was found in memory.
C:\PROGRAM FILES\PDM\AKV.EXE contained the trojan.
Active trojan horse WAS shut down. System safe.
Hey Kevin,
Thanks so very much for your warm email !!!
Most definitely very much appreciated; I’ll reply later.
No it’s not working. latest version 2.9 is not detected yet…
Sorry - my mistake - it’s working. :■■■■