Is Avast able to remove Rapzo Logger keylogger if one is infected?

[bigspanner]

Is Avast able to remove Rapzo Logger keylogger if one is infected?

How to remove it if infected? Can Avast remove it? If not, why not?

[polonus]

Convince yourself here: https://www.virustotal.com/en/file/df696bc2f7c0a5ae915ba96cc8c74282fad7fb9bd52a97cd4cb2b6fdbc336ad7/analysis/1345495400/
avast! detects as Win32:VB-ADKE [Trj]

polonus

[bigspanner]

@polonus

What you showed me is the Virus Total of an underground patch of Rapzo Logger. Most patches are known to be malware infested, so I'm not surprised, like those malware infested key gens.

But what about the original Rapzo Logger? It's said to be FUD.

[polonus]

Hi bigspanner,

Please upload it here -> http://www.simseer.com/webservices/SimseerSearch/SimseerSearch.html
and see to what it is subtly related and also do a VT upload. Provide us with the scan links please...

polonus

[polonus]

MBAM has detection, see: http://pastebin.com/PMLnz50p

polonus

[Pondus]

and since MBAM detect it as PUP it is possible that avast also does, meaning you must turn on PUP scan to detect it
PUP = not a virus / Possible Unwanted Program

[bigspanner]

How am I going to upload Rapzo Logger for it to be scanned when I don't even know if my PC is infested with it or not?

I'm not asking if Rapzo Logger is false-positive or not. I know it is bad, but if it can't be detected by Avast, then we will never know if it is on my PC or not.

Why're you showing me what MBAM is detecting? I'm asking if AVAST can detect Rapzo Logger or not, not MBAM.

Besides, what MBAM is detecting is not the original Rapzo Logger, it is detecting patched versions of it, as shown in the exe filenames:

rapzo logger - hwid generator.exe
rapzo logger v 1.6.2 - private edition.exe

I'm not interested in knowing if Avast or MBAM can detect patched versions of a software. Patched versions usually trigger anti-virus softwares.

You mean to tell me Avast does not even know what it can detect and what it can't? It's like Russian Rouletter then, am I right?

[bigspanner]

Seems like there is no one here from AVAST who knows how to handle this question about Rapzo Logger keylogger.

[essexboy]

That keylogger can be used for good or bad..  You will need to set PUP detection to on.  If it was removed as a matter of course then people with legitimate copies would be a tad miffed

[bigspanner]

So can I confirm that AVAST can detect Rapzo Logger?

I've come across the legalities of using any keylogger, so if it was used legitimately, the user who plant the key-logger on a computer must have permission to do so. Meaning, he should be able to whitelist the keylogger with AVAST.

By default, AVAST should signal an alert on detection of the keylogger and then leave it to the user to either delete it, quarantine it or ignore it.

Whether or not the user will be miffed or not should not justify not to alert on its presence. I'm not asking if AVAST will remove the keylogger. I'm asking if AVAST can detect it or not. That is my question.

[Pondus]

I'm asking if AVAST can detect it or not. That is my question.

and as said...it may do so if you turn on PUP scan

[polonus]

Avast detects as Win32:VB-ADKE [Trj] ,

polonus

[bigspanner]

Is this what I should tick in the File System Shield? I've never ticked that before, as I follow default settings.

[essexboy]

That is correct

[bigspanner]

Thank you.