JustinProdo 0 Posted May 29, 2019 Share Posted May 29, 2019 Hello internat.exe is Keylogger for Windows Please add to database Link to comment Share on other sites More sharing options...
Administrators Marcos 4,716 Posted May 29, 2019 Administrators Share Posted May 29, 2019 It can be anything from a benign system file, renamed calculator.exe to malware or whatever. The file name doesn't tell anything about the file. Please provide its hash or upload it to VirusTotal and provide a link to scan results. Link to comment Share on other sites More sharing options...
itman 1,542 Posted May 29, 2019 Share Posted May 29, 2019 (edited) 7 hours ago, JustinProdo said: internat.exe is Keylogger for Windows Not really. It's a legit Win system process in Win XP: https://www.neuber.com/taskmanager/process/internat.exe.html If it is running from any location other than the System32 directory or on Win Vista+, then that process is suspect. Edited May 29, 2019 by itman Link to comment Share on other sites More sharing options...
JustinProdo 0 Posted May 30, 2019 Author Share Posted May 30, 2019 ESET Internet Security 12.1.34.0 don't find this Link to comment Share on other sites More sharing options...
Administrators Marcos 4,716 Posted May 30, 2019 Administrators Share Posted May 30, 2019 It's a hosts file and by the looks of the screen shot and the detection name I'd say it's a crack for the AV in the screen shot that added a record to the hosts file to prevent the program from contacting activation servers or whatever Link to comment Share on other sites More sharing options...
itman 1,542 Posted May 30, 2019 Share Posted May 30, 2019 2 hours ago, JustinProdo said: ESET Internet Security 12.1.34.0 don't find this More details here: https://blog.malwarebytes.com/detections/riskware-dontstealoursoftware/ Link to comment Share on other sites More sharing options...
Recommended Posts