Common information

The section contains common descriptive information concerning malicious programs and some peculiarities how to fight these programs using Kaspersky Lab’s products. If you failed to find the necessary information or you find these recommendations too complicated or inadequate, please send a request to the Technical Support service via the HelpDesk form.

A pop-up window of the Proactive Defense component – Suspicious Action: Keylogger is displayed when applications of other vendors are launched. What should I do?
ID Article: 1117	Other languages: Will be translated:	53	2008 Aug 28 09:28	Printable version

	Useful links
	Message “Process PID tried to access Kaspersky Anti-Virus process, but it has been blocked” How to manage exclusion masks of trusted zone How to manage trusted applications of the Trusted zone Trusted zone

Concerning to:

Kaspersky Anti-Virus 6.0 MP1 (build 6.0.1.411)

Kaspersky Internet Security 6.0 MP1 (build 6.0.1.411)

Kaspersky Anti-Virus 6.0 MP2

Kaspersky Internet Security 6.0 MP2

Kaspersky Anti-Virus 6.0 for Windows Workstations MP2

Keylogger is a program which embeds itself in the keyboard driver and intercepts the keys pressure. Malicious program of the kind can send information entered from the keyboard (logins, passwords, and credit card numbers) to a violator.

On the other hand Keylogger can also be used by legal programs to call out program functions of other application(s0 using “hotkeys”. Examples of such programs are ICQ and Skype.

If the executable file, on which the Proactive Defense component of Kaspersky Anti-Virus version 6.0 triggered, is legal and belongs to the application which was installed earlier on your PC, then it is recommended to add this file to Trusted zone of Kaspersky Anti-Virus version 6.0. To do it, use the Add to Trusted zone link in the pop-up window of the Proactive defense component.

If the executable file does not belong to any application installed on your PC, and does not have a digital signature either, it is recommended to pack this file to a password-protected archive and send it via e-mail to Kaspersky Lab for analysis to newvirus@kaspersky.com. In the body of the message do not forget to give the password to the archive into which the suspiciopus object was placed.