from Andrew

Recently, I purchased a program called PestPatrol, which runs silently in the background. It's fairly new and has won many awards internationally. Better than Ad-aware and SpyBot. PestPatrol has a facility (amongst others) for detecting keyboard loggers. On starting my computer, I was warned by PestPatrol that it had detected a keylogger, namely TempIadHide3.dll file. PestPatrol also informed me that TempIadHide3.dll was considered to be safe. Further investigation revealed that this particular file was related to my Logitech keyboard and mouse (and BackWeb Lite). TempIadHide3.dll was duly deleted from my computer, with no detrimental effect to the keyboard/mouse. Although BackWeb Lite deny any keylogging, it's strange that PestPatrol should find to the contrary. Mmm. I wish to sincerely thank you for your efforts, site and investigations. All the best. Andrew Gilligan

Reply from Devilin

Backweb, suggest they only monitor keyboard / mouse activity, so they know when the computer is inactive, they claim they don't record key strokes, it just monitors for activity, perfectly plausible, but the opportunity for exploding this facility, are obvious, they use kernel32.exe, keylogger I,m not sure about TempIadHide3.dll ? are you sure, this is a correct spelling? I've researched and neither Backweb, or PestPatrol, or anybody else has this listed, and it seems strange Backweb would use a dll, direct link library, ie sub program folder for such a purpose

from PEASUNCARROTS

hi i read your sight about backweb it was stopping me opening jpgs said was error when compressing info pack so i deleted it cos was told it was spy wear and not neccessary now have lost PVRCNT.EXE: FILE to open them can open bmps no problem just jpgs weird . Have searched every where in putor for this file and cant find it so can you advise please.

Reply from Devilin

PVRCNT.EXE: FILE ? this file isn't listed, Windows file library, or any of the usual places, could you tell me what program your using to open, images with ?

from You Are A Blessing:)

We all know you work full time, but have devoted time to help others in distress, and I thank you.

Reply from Devilin

I'm sure some company bosses, think otherwise J and I'm sure you'd do the same yourself, Bless J

from BackWeb

I have a frozen "Tis program has performed an illegal act" on my desktop. Is this because of all the BackWeb files I have? And will a firewall affect my WnMX music download program?

Reply from Devilin

This program has performed an illegal act,? I couldn't say without a lot more details, I'd suggest going to these forums, for a fast response, you're need to give them, a lot of information about your registry, they'll help you with that, wonderful people that they are

As for WnMX no a firewall shouldn't affect it, these type of file sharing programs, are often infested with viruses, worms and a host of other nasty's, this is the more likely source of your computer freeze, and illegal program act, make sure you're anti virus, is up to date, if you haven't got one download some immediately, download a firewall, and this

from BackWeb lite

I have 80 BackWeb lite files showing up with the location, HKE_CLASS_ROOT/ Is this valid? It's strange, but it's driving my Netscape 7 crazy with sluggishness and added pages and all kinds of advertisement popups. But it doesn't affect My Netscape 4.7. What's the deal with this?

Reply from Devilin

Its certain driving me crazy, no hke files were used when I tested the particular version of BackWeb I managed to get hold of, although this doesn't mean its not a valid Backweb file, but I'm lost, its a common file used for various things, not particular suspicious in itself, and why it should affect Netscape I've got no idea whatsoever?

? Have you tried using the Netscape Feedback System ?

from Yankees

When I ran the scan, I came up with a lot of BackWeb lite listings on the scan page. Most involving the registry. Should they be removed?? Things like HKEY_CLASSES_ROOT\interface etc etc

Reply from Devilin

I certainly wouldn't suggest playing around with registry entries, by hand, the consequences can be disastrous, although if you removed the program itself, via the uninstall option, a program like spybot S&D, could certainly clean the redundant registry entries up, without any trouble

from Confused

How do I determine if I should remove Backweb from my computer or no? I have seen several messages on this site saying that they had error messages after they removed Backweb, and I do not wish for that to happen to me. Thanks!

Reply from Devilin

If you're not entirely confident about removing the program, leave it , you can easily block its activities with a firewall

Of course the program itself will still be running,in the background, eating up system resources,