Loading Profile...
Threatfire keeps warning me that wuala is "logging keystrokes"
It has happened twice already. yesterday and today (i have installed wuala for over a week). threatfire considers it a high security risk. i've temporarily allowed wuala to run even though i can't imagine why keylogging is needed.
What could trigger this? Is it a false positive or is there some security issue we should know about?
What could trigger this? Is it a false positive or is there some security issue we should know about?
I’m worried
1 person has this question
I have this question, too!
Tell me when someone answers.
The more people who ask this question, the more it gets noticed.
The more people who ask this question, the more it gets noticed.
-
Inappropriate?Thats very strange. Of course, Wuala does not log your keystrokes!
I think this is a false positive - however, I have installed Threatfire on my own machine to investigate this problem. What is your Protection Level (under Settings, default is 3)? -
Inappropriate?> Of course, Wuala does not log your keystrokes!
That's good to know :-)
Protection level is at the default (3) as are all other settings.
The Protection Log reads:
Keystrokes Logged (ALLOWED)
Triggered on 26/03/2008 at 10:41:38 AM
Triggered by WUALA.EXE
user was logged on at the time
I can't find anything else about that particular message although I remember that the popup had a few more info, if/when I see it again I'll copy the full message and post it here. -
Inappropriate?Ok, I got another Alert from Threatfire today, the text from the popup follows:
==================
Alert
"An application has performed an action that is potentially malicious.
Risk: High
Application Name: WUALA.EXE
Path: F:\\WUALA ONLINE HARD DISK (note: this is where I installed Wuala)
What Happened?
This program is logging keystrokes
Risk Level
High. This action might represent a threat to your system security. Some legitimate and trustworthy programs perform this action, but it is not common.
Threat type
This attack typically appears in spyware and adware.
==================
That's it, I get the option to Allow or to Quarantine. I responded Allow once again.
By the way, I can use Wuala right now (can browse images for example), but the Wuala Network Drive (La on 'Wuala SMB Server (Wua)') is disconnected for some reason. I don't know if this has anything to do with the above message, I'm just reporting it.
Roger, did you have any luck recreating the problem? -
Inappropriate?No, I had no luck. Threatfire and Wuala were both running all the time...
-
Inappropriate?Ok, I got this error too. I've contacted the Threatfire developers and now it should be fixed. Please report if you get this alert again.
I’m happy that this problem is solved
EMPLOYEE
