Downloaded a Program called Anti-Keylogger Elite

[fsstrike]

Firstly, I potentially downloaded a keylogger by accident a few days ago. I downloaded this program called Anti-Keylogger Elite and it supposedly found 3 keyloggers in my system:

C:\Windows\System32\Msctf.dll
C:\Windows\System32\Shell32.dll
C:\Windows\System32\Shdocvw.dll

Are these actual keyloggers? And has anyone even heard if this program is any good? I have tried deleting these files but they just keep comming back. If these are indeed real keyloggers, what can I do to get rid of them?

 

[mzkhadir]

Shdocvw.dll is used by WMP.
Shell32.sll is used by XP to display themes.

I dont know about the other one.

 

[imported_Ned Flanders]

Google the file names - Anyway as above poster said, the first 2 shouldn't be a problem.

 

[BurnItDwn]

It looks like Msctf.dll is part of some text service by Microsoft.

http://www.bang.ro/msctf_dll.htm
http://www.liutilities.com/products/wintaskspro/dlllibrary/msctf/

 

[skyking]

That program may be malware or spyware itself. Many spyware programs are passed off as security "aids".

I would consult the thread stickied to the top of this forum here.
The programs listed in that post at the top are verified, known helpful solutions. Beware of imposter programs with very similar names.
I would not use any anti-spyware not listed there, plain and simple.

 

[xtknight]

shell32 is a resource file containing lots of aspects of the Windows shell.
msctf is from MSOffice (something to do with internationalization IIRC).
shdocvw contains functions to display shell documents.

Unless the keylogger changed its name to one of these, these are most definitely not harmful files. They are critical system files.

 

[gsellis]

Originally posted by: xtknight
shell32 is a resource file containing lots of aspects of the Windows shell.
msctf is from MSOffice (something to do with internationalization IIRC).
shdocvw contains functions to display shell documents.

Unless the keylogger changed its name to one of these, these are most definitely not harmful files. They are critical system files.

QFT

Sounds like false positives. The keylogger detector is just looking at what has subclassed the keyboard class and not weighing the validity of why. I am surprised that you don't also have a hotkey driver to support custom buttons on a keyboard. So, that means you have a stock keyboard with no additional keys or have not loaded a keyboard driver.

 

[nova2]

if you're still concerned then compare the hash of your files to files from a box that you know is legit.

if clueless, then use fsum or http://www.irnis.net/soft/xcsc/ to get hashes.

 

[marmasatt]

That program may be malware or spyware itself. Many spyware programs are passed off as security "aids".