Brands tend to facilitate the maximum life of users, giving them functionality, many times, They have hidden dangers.
A HP, known brand of computers, now it has a new problem at hand. It was found that the audio driver of your machines have a keylogger installed and the collected data can be easily stolen.
The discovery of this new situation was made by the security company Modzero, that detected on HP computers running an application that recorded every keystroke that you wore.
After analyzing the process MicTray64.exe, accompanying audio driver Conexant, found out that, in addition to the keys of records, these are stored in plain sight.
The equipment list is extensive, They are more affected 28 computers. The list of these devices can be found below.
HP EliteBook 820 G3 Notebook PC
HP EliteBook 828 G3 Notebook PC
HP EliteBook 840 G3 Notebook PC
HP EliteBook 848 G3 Notebook PC
HP EliteBook 850 G3 Notebook PC
HP ProBook 640 G2 Notebook PC
HP ProBook 650 G2 Notebook PC
HP ProBook 645 G2 Notebook PC
HP ProBook 655 G2 Notebook PC
HP ProBook 450 G3 Notebook PC
HP ProBook 430 G3 Notebook PC
HP ProBook 440 G3 Notebook PC
HP ProBook 446 G3 Notebook PC
HP ProBook 470 G3 Notebook PC
HP ProBook 455 G3 Notebook PC
HP EliteBook 725 G3 Notebook PC
HP EliteBook 745 G3 Notebook PC
HP EliteBook 755 G3 Notebook PC
HP EliteBook 1030 G1 Notebook PC
HP ZBook 15u G3 Mobile Workstation
HP Elite x2 1012 G1 Tablet
HP Elite x2 1012 G1 with Travel Keyboard
HP Elite x2 1012 G1 Advanced Keyboard
HP EliteBook Folio 1040 G3 Notebook PC
HP ZBook 17 G3 Mobile Workstation
HP ZBook 15 G3 Mobile Workstation
HP ZBook Studio G3 Mobile Workstation
HP EliteBook Folio G1 Notebook PC
This keylogger is present in an audio driver that came with the HP computers, and is intended to detect whether one of the keys associated with the control of the audio was clicked. There would be no problem if these records were not being kept in an easily accessible file in Windows.
Malware designed to exploit this flaw could quickly access the user-written data, which include data access to any service and their passwords.
How to detect and remove the HP keylogger?
The simplest way to detect the keylogger is active on your HP computer by detecting the presence of one of the following applications on Windows
C:\WindowsSystem32MicTray64.exe
C:\WindowsSystem32MicTray.exe
If one is to be present, You should remove it or rename it so that it is not running and thus not these data are collected.
HP is already working to solve this problem, should very soon release an update to fix. curiously, the previous version of this driver, dated 2015, I had this present application.
You can read this news in full: https://pplware.sapo.pt/gadgets/hardware/hp-keylogger-registam-escreve/