Thursday May 11, 2017

HP Is Shipping Audio Drivers with a Built-In Keylogger

HP has been caught silently recording every keystroke in certain laptop models: their audio drivers are essentially acting as a keylogger. While the logfiles generated will disappear once a user logs off, this behavior is still unwarranted and troublesome, especially for those who keep incremental backups. The fix is to delete C:\Windows\System32\MicTray64.exe or C:\Windows\System32\MicTray.exe.

News Image

آ…an update to HP’s audio drivers released in 2015 introduced new diagnostic features. One of these is used to detect if a special key had been pressed or released. Except it seems this was poorly implemented, as the driver ultimately acted like a keylogger, capturing and processing every single keypress. A later update to the driver was even more troubling, as it introduced behavior that wrote every single keypress to a log file stored locally on the user’s system. This is found at C:\Users\Public\MicTray.log.