What Is a PDM Keylogger?

Antivirus programs alert you to potential problems with your computer.

The 2010 version of Kaspersky Internet Security may report various programs and processes as infected with "PDM.Keylogger." In some cases, this is a false positive.

Detection

Kaspersky Internet Security detects PDM.Keylogger via its "Proactive Defense" component. According to Kaspersky Labs, the process is reported as "Process (PID:0): kernel mode memory patch." The official support forums contain a number of discussions on PDM.Keylogger.

Considerations

Keyloggers are malware that read keyboard and mouse input and then send that information to another computer or another person. Common keylogger uses include harvesting personal banking information, online passwords, or copying private chat and email messages for someone else to read. PDM.Keylogger is the generic designation assigned by Kaspersky Internet Security to any process it suspects may be tracking your sensitive information, but cannot be identified more specifically.

False Positives

Kaspersky Internet Security is the only antivirus software that reports PDM.Keylogger. According to the official Kaspersky Labs support forums, the "Proactive Defense" module of Kaspersky Internet Security may report any process it suspects of analyzing any information passed via keyboard or mouse input. If you are certain the program or process your computer is attempting to run is from a safe, trusted source, you can add it to the Kaspersky Internet Security program's exclusion list. This will prevent the program from blocking your application's execution.

References

• Kaspersky Support: Internet Security 2010
• Kaspersky Support Forums: Search Results, PDM.Keylogger

Resources

• Kaspersky Support: Internet Security 2010
• Symantec: Introduction to Spyware and Keyloggers