HP Is Shipping Audio Drivers with a Built-In Keylogger

Megalith

24-bit/48kHz
Staff member
Joined
Aug 20, 2006
Messages
13,000
HP has been caught silently recording every keystroke in certain laptop models: their audio drivers are essentially acting as a keylogger. While the logfiles generated will disappear once a user logs off, this behavior is still unwarranted and troublesome, especially for those who keep incremental backups. The fix is to delete C:\Windows\System32\MicTray64.exe or C:\Windows\System32\MicTray.exe.

…an update to HP’s audio drivers released in 2015 introduced new diagnostic features. One of these is used to detect if a special key had been pressed or released. Except it seems this was poorly implemented, as the driver ultimately acted like a keylogger, capturing and processing every single keypress. A later update to the driver was even more troubling, as it introduced behavior that wrote every single keypress to a log file stored locally on the user’s system. This is found at C:\Users\Public\MicTray.log.
 
Checking this out for my workplace -- thanks for the heads up.
 
Reminds me of the time Capcom tried to get away with implementing anti-cheat in a very poorly coded rootkit.
 
Cue the imaginary, over-cooked outrage....."my work laptop!? is SPYING!? THIS WILL NOT STAND!" <hang me now>.
 
I see HP is learning from Big Brother Microsoft in putting keyloggers in place.
 
Some engineer is going to have his/her head on a silver plate, at least they should.
 
Kind of worked I guess. I'd type in boobies, get a bit of audio, and then it all got recorded. So......yea, worked!
 
spock.gif
 
why does an audio driver need to log key strokes??

The official response is that the keylogger is a developer/debug tool that was not supposed to be included.

I don't have enough knowledge in audio/driver development to confirm or refute that claim.
 
Back
Top