Bo102010

According to http://www.f-secure.com/weblog/archives/00002133.html , the "SL" path thing was exactly right!

I stand corrected, and should have read the followup article.

I don't think the Samsung "confirmation" brings me to 50% confidence that Samsung actually was logging and capturing people's keystrokes, though.

I would still like to see what the keylogger is actually doing - storing, transmitting, what?

This strikes me as dubious at best. I think a more likely explanation is that his detection software is flagging anything with the path "c:\windows\SL" as malware.

He says "This key logger is completely undetectable," which is clearly untrue (he has allegedly detected it).

If it's logging his keystrokes, it's either storing them locally or sending them off somewhere else, or both. If he's as qualified as he says, he should be able to find out which (find a file that increases in size after a lot of keystrokes, use Wireshark...).