From Violations Tracker
Jump to: navigation, search
MALWARE Violation

Incorporates keylogger

Status: Current — The violation is standing.

Some models of HP EliteBook, HP ProBook, HP ZBook and HP Elite laptops incorporate a device driver for Conexant audio chips which, seemingly due to extreme carelessness rather than malice, logs all keystrokes to a log file.

The keystrokes are also logged using Windows's OutputDebugString function, which may allow arbitrary processes to capture the information even where the keystrokes are not logged to disk.

It appears that this device driver with this specific functionality was specially tailored for HP devices and does not extend to other, non-HP Conexant audio drivers.