Samsung Laptops Slovenian language directory mistaken for keylogger

5to1baby1in5

Golden Member
Apr 27, 2001
1,250
109
106
Edited for new info.

It appears that the directory for the windows Slovenian language directory is recognized as a key logger just because of its folder structure. Any PC with that C: \Windows\SL folder would have been flagged as a keylogger.

Good news for all.


http://www.msnbc.msn.com/id/42349281/ns/technology_and_science-security

The South Korean electronics giant Samsung may be spying on its own customers, using a program pre-installed on laptops that secretly monitors every keystroke.

In a guest posting on NetworkWorld, Toronto security researcher Mohammed Hassan described how he found keylogging software on a brand-new Samsung laptop he bought last month. He deleted it and continued to use the laptop, until it developed other problems.

Hassan returned it to the retailer and came home with a slightly better Samsung model — which also turned out to have the keylogging software.

He called Samsung telephone support, and after some buck-passing, finally spoke to a supervisor, who first tried to blame it on Microsoft.

Told that didn't make sense, the supervisor then admitted to Hassan that the software is there to "monitor the performance of the machine and to find out how it is being used."

The software was a commercial product called StarLogger, which its maker says is "completely undetectable and starts up whenever your computer starts up."

It also captures screenshots at predetermined intervals. Both the keystrokes and the screenshots can be secretly emailed to designated addresses.

Hassan says there was no notification that his keystrokes were being logged.

But it seems that Samsung may not have been trying very hard to conceal StarLogger. The software was hiding in plain sight at the file path "c:\windows\SL\".

Samsung's behavior is probably illegal, and definitely unethical. As Hassan puts it, "the issue has legal, ethical, and privacy implications for both the businesses and individuals who may purchase and use Samsung laptops."

Five years ago, the Sony BMG music company was found to be illegally inserting malware on music CDs that would install "rootkits" into Windows laptops to prevent them from "ripping" MP3 files. Sony BMG eventually paid $575 million in fines and payouts connected with multiple lawsuits.

To anyone who's recently purchased a Samsung laptop, make sure you scan it thoroughly with antivirus software, and also search its Windows folder for a directory called "SL."

If you find something like what Hassan described, you might want to consider contacting NetworkWorld — and possibly a lawyer.

Samsung representatives had not responded to NetworkWorld's queries by Wednesday afternoon (March 30).
 
Last edited:

waggy

No Lifer
Dec 14, 2000
68,143
10
81
wow not bright.

hope its not true but if so they need bitch slapped and hard.
 

child of wonder

Diamond Member
Aug 31, 2006
8,307
176
106
This is why EVERY laptop and desktop I purchase from any retailer gets all partitions deleted and a fresh install of Windows the moment I get it.
 

techs

Lifer
Sep 26, 2000
28,559
4
0
Wow. A laptop that actually saves time. Now I don't have to wait to be infected with spyware.
 

Crono

Lifer
Aug 8, 2001
23,720
1,502
136
I didn't know Samsung made laptops.

But I always install retail Windows, anyway, and lately I've been custom assembling my laptops/laptops for other people.

Always a fresh install of Windows on a clean drive.
 

CurseTheSky

Diamond Member
Oct 21, 2006
5,401
2
0
Fuck. That. Shit. Normally the privacy / tin foil hat debates don't really concern me, but I would be absolutely furious if I found out that my computer was secretly being monitored by the manufacturer or company that I bought it from.

A keylogger is bad enough, but screenshots at random intervals as well? That gives them access to virtually all of your private information.
 

Bateluer

Lifer
Jun 23, 2001
27,730
8
0
This is why EVERY laptop and desktop I purchase from any retailer gets all partitions deleted and a fresh install of Windows the moment I get it.

Same for me, but only .01% of people actually do that. And I think that might be optimistic.
 

Lifted

Diamond Member
Nov 30, 2004
5,748
2
0
This could be the end of Samsung in the US.

To think Samsung could be this stupid after the Department of Justice told Sony that if something similar happens again their products will no longer be welcome here (Sony's rootkit found it's way onto government computers).
 

Ichinisan

Lifer
Oct 9, 2002
28,298
1,235
136
This could be the end of Samsung in the US.

I hope not. I think it was probably an honest mistake.

The software sounds like something that's perfectly fine for corporations to install on their employees' PCs. I'm sure it was never meant to go on production systems.
 

Lifted

Diamond Member
Nov 30, 2004
5,748
2
0
I hope not. I think it was probably an honest mistake.

You don't have to tell me. I know all about honest mistakes!

Just the other day I noticed this tiny camera in my bathtub drain. I was completely perplexed on how it could have gotten in there so I decided to call the manufacturer. They told me it was there to monitor the performance of their bathtub, and to see how it's being used in order to improve future models. I told them I should have been notified ahead of time of this invasion of privacy, they agreed that it was an honest mistake and that they are in the process of upgrading all of their products packaging to notify customers that their tubs have cameras installed.

The said they will be sending me a FREE bar of soap for my troubles, so I actually made out in the end. :thumbsup:
 

Ichinisan

Lifer
Oct 9, 2002
28,298
1,235
136
You don't have to tell me. I know all about honest mistakes!

Just the other day I noticed this tiny camera in my bathtub drain. I was completely perplexed on how it could have gotten in there so I decided to call the manufacturer. They told me it was there to monitor the performance of their bathtub, and to see how it's being used in order to improve future models. I told them I should have been notified ahead of time of this invasion of privacy, they agreed that it was an honest mistake and that they are in the process of upgrading all of their products packaging to notify customers that their tubs have cameras installed.

The said they will be sending me a FREE bar of soap for my troubles, so I actually made out in the end. :thumbsup:

I know you're being sarcastic. Seriously, a know-nothing phone rep made some BS comment about it being there "probably for performance monitoring or something." Of course the rep would assume it wasn't as nefarious as the caller implied. Lots of devices have shipped with pre-loaded viruses before and it was clearly unintentional.

Still deserving of punishment, though...because it would be a pretty bad mistake.


...and I don't think it's a virus either. I believe it's something they meant to install on all their employee systems.
 
Last edited:

gevorg

Diamond Member
Nov 3, 2004
5,070
1
0
Maybe its not coming directly from Samsung but their US distributor who bloats the laptops with crap like Quicken/etc. I can totally see how some WorstBuy GeekSquad doing this shit. I really hope its not some mass profiling scheme against people named "Mohammed".