If you’ve purchased or bought new Samsung R series laptop you should know that they are coming pre-installed with commercial keylogger software StarLogger (Samsung confirms this as false positive read the update below the post). Updated antivirus in your Computer you’re using may able to detect and remove StarLogger here is how to find presence of StarLogger in your Samsung laptop and remove it.
Keyloggers records everything you type, captures screenshots, logs what you fill in forms and sends them to hacker. We’ve covered Ultimate Guide to Protect from Keyloggers and free software that offers protection against keyloggers like StarLogger.
Finding and Removing Starlogger
1. By default StarLogger will be found in this directory C:\Windows\SL directory and its executable will be running (path C:\Windows\SL\WinSL.exe). You can observe WinSLManager.exe process running in the task manager .
2. If updated antivirus can’t comes to rescue you need to manually remove StarLogger and it’s not that much hard either. First of all you need to stop active processes of StarLogger running in the background. Open Task Manager, find WinSLManager.exe and End that process.
3. Unregister the StarLogger DLL file by executing following command from command prompt
4. Open registry Editor by typing “Regedit” in Run command box and search for “ winsl” without quotes. You need to delete registry key shown for StarLogger as below
Update : Samsung denied they are shipping their laptops with any spyware or keylogger sofware installed, instead they say Vipre scanner detected Live application directory “Slovene” as a StatLogger in security Researcher’s Samsung laptops of models R525 and R540 .
Update : We apologize to Samsung this post/we no way intended to spoil their brand’s reputation.
Have you found StarLogger in your
Samsung Computer? do let us know in comments.