False Positive? H@tKeysH@@k.dll

[kstev99]

This was detected as a Trojan Keylogger.  It was installed with a game trainer, to use with games.  From the cheathappens site:

https://www.cheathappens.com/virus_warning.asp

Specific Virus Warnings

HotKeysHook.dll
This file is a part of the TRAINER MAKER KIT, an older, but popular program used to create trainers. This file has been around for many, many years and somewhere along the way it got labeled as a trojan keylogger. THIS IS A FALSE READING. Many popular antivirus applications have removed this false positive from their signatures, but some still carry it. This file IS NOT A TROJAN KEYLOGGER and is completely safe. It simply listens for keys to be pressed inside the game so it can activate the options from the trainer.

 

Can this file be trusted?

[cli]

Can you attach scan log and detected file? Thanks.

[kstev99]

H@tKeysH@@k.rar

MBAM Scan Log.txt

[miekiemoes]

Hi,

This is a valid detection. We don't detect as a keylogger, but as HackTool.HotKeyHook, as that's what it is.

It's not malicious, but is often used for malicious purposes, hence why we need to alert the user about this, just in case the user isn't aware of the presence of this file.

You'll see that a lot of other Antivirus also detect this for the same reasoning.

You can create an exclusion for this file, since you are aware of its presence.

[kstev99]

Thanks!  I'll just add it exclusions.