Detection of Commercial Keyloggers

[Guest Richard]

I'm curious to know NOD32/ESET's policy regarding the detection of commercial keyloggers. These programs are readily available online, sometimes for free, and go largely undetected by most antivirus scanners. Historically they have been used as they were intended - in corporate networks to keep track of employees. Unfortunately now it seems these commercial keyloggers are being used for other more malicious purposes. This was evidenced by the fact one of my friends facebook and email had been hacked by one such program (I detected it manually with IceSword - no AV product would detect it!). My friend lent her laptop to her brother who we suspect installed the keylogger. Obviously this could have been prevented by using a non administrator account, but the average computer user doesn't know this.

 

Would it be possible for NOD32 to detect commercial keyloggers, maybe including them in a separate category (like Potentially Unwanted Programs - or maybe even it's own category of 'Commercial Keyloggers')? This way users who do not want keyloggers on their computers can have them detected, while those who want the keyloggers active can keep the option to detect them disabled.

[Marcos 5,259]

They are already detected with default settings. If you come across an undetected sample, please submit it to ESET as per the instructions here.