[sf-lug] Samsung preinstalls Keylogging software on the computer.

[Bobbie Sellers]

Copied from the Team *Amiga* list because you
know I thought people should see that bad behavior
is not yet dead in the Computer building industry.
Quoting from
You are previewing premium content. Become an Insider 
<http://reg.idgenterprise.com/insider.html?url=http://www.networkworld.com/newsletters/sec/2011/032811sec2.html> 
to read the full article.
You are viewing Insider content. Browse other Insider articles 
<http://www.networkworld.com/insider/>

Mohamed Hassan, MSIA, CISSP, CISA graduated from the Master of Science 
in Information Assurance <http://infoassurance.norwich.edu/> (MSIA) 
program from Norwich University <http://www.norwich.edu> in 2009. As 
usual, it is a pleasure to collaborate with an alumnus on interesting 
articles – and in this case, his research is startling. Everything that 
follows is Mr Hassan's own work with minor edits.

* * *

In the fall of 2005, the security and computer world was abuzz with what 
was at the time dubbed as the "Sony BMG rootkit Fiasco." Sony BMG used a 
rootkit, computer program that performs a specific function and hides 
its files from the regular user, to monitor computer user behavior and 
limit how music CDs were copied and played on one's computer 
<http://news.cnet.com/Sony-CD-protection-sparks-security-concerns/2100-7355_3-5926657.html?tag=txt%20http://news.cnet.com/Sony-CD-protection-sparks-security-concerns/2100-7355_3-5926657.html?tag=txt>. 


To continue reading, register here 
<http://reg.idgenterprise.com/insider.html?url=http://www.networkworld.com/newsletters/2011/032811sec2.html> 
and become an Insider. You'll get free access to premium content from 
CIO, Computerworld, CSO, InfoWorld, and Network World. See more Insider 
content <http://www.networkworld.com/insider/> or sign in 
<http://reg.idgenterprise.com/insider.html?url=http://www.networkworld.com/newsletters/2011/032811sec2.html>.

Mohamed Hassan, MSIA, CISSP, CISA graduated from the Master of Science 
in Information Assurance <http://infoassurance.norwich.edu/> (MSIA) 
program from Norwich University <http://www.norwich.edu> in 2009.

After an in-depth analysis of the laptop, my conclusion was that this
software was installed by the manufacturer, Samsung. I removed the
keylogger software, cleaned up the laptop, and continued using the
computer. However, after experiencing problems with the video display
driver, I returned that laptop to the store where I bought it and bought
a higher Samsung model (R540) from another store.

Again, after the initial set up of the laptop, I found the same
StarLogger software in the c:\windows\SL folder of the new laptop

http://www.networkworld.com/newsletters/sec/2011/032811sec2.html


later
bliss