HP probably accidentally put keylogger in audio drivers – update

HP probably accidentally put a keylogger in the audio driver of laptops. The keylogger was included in an update in 2015 that tracked to the audio driver whether users pressed a certain button on the keyboard to perform a function.

The audio driver wrote a log of keys pressed to the file C:UsersPublicMicTray.log after a later update. The computer empties the file every time the user logs out. Security firm ModZero, which discovered the keylogger, suspects that there is no intent involved. Among other things, the keylogger stored passwords in plain text without the user’s knowledge.

Since HP has not responded to ModZero’s report, the company has decided to put the information online. The keylogger is on many different laptops from the manufacturer with Windows 7 and Windows 10, according to the detailed information about the software.

Users of affected laptops can check if the log is on their laptop and if so, just delete the file C:WindowsSystem32MicTray64.exe or C:WindowsSystem32MicTray.exe to save the keylogger. remove. The audio function that only works with the press of a preset button will no longer work, ModZero warns.

HP has confirmed the issue to TheNextWeb. The manufacturer says it will soon come up with an update to fix the problem.

Update, 10:38: HP Benelux has issued a statement on the matter. “HP is committed to the security and privacy of its customers and we are aware of the keylogger issue on a number of HP PCs. This issue does not give HP access to customer data. Our supplier has developed software to test the audio functionalities prior to product launch. launch. This should not have been in the latest version that was sent. A fix is ​​available at HP.com.”