

Sometimes console commands act very oddly to this (depending on how good the intercepting routines are written). The alledged keylogger may be intercepting information typed or viewed on screen, in order to capture the info and send 'home' the screen shots or keystrokes, etc. All functions, including the console, get funnelled thru kernel level drivers, (and somtimes upper and lower filters). ZTree is not necessarily being tricked into anything. > doing a command without logging the keystrokes, but I don't know how that I find it hard to believe that Ztree can be tricked into > Ztree's key logging option isn't recording anything like that, which I > stage it was adding a few UPs or DOWNS too, but I haven't seen that again. > This is simply making Ztree act as though I pressed T or V after O. However, the average user might not given their reliance on Exploder. I suspect you would detect this too, as would most of the forum members here. As it intercepted all of the screens, keystrokes, etc., it put such a load on the system that I detected the problem almost immediately. Spector Pro is suppose to be one of the 'better' commercial grade keyloggers, that claims is totally invisible to the end user. From there I back tracked the associated files and found Spector Pro.

I launched Process Explorer and found the errant dll that was in place. (I had it set to a very high limit to exceed even my wildest expectations and exceeding that meant something was definitely wrong.)
#SPECTOR PRO KEYLOGGET WINDOWS#
Finally Windows (XP Pro) coughed up an error/warning message about insufficient Virtual Memory and was expanding it. One notable affect was that I was working thru ZTree screens (via macros) and the system was acting terribly slow.

Could a keylogger or similar program be running withoutĪll sorts of things, to many to describe here, but none that the 'average' user would have attributed to this type of program/malware.
