I remember that when it became known that Yandex had bought the rights to Punto Switcher, the question “Why?” Immediately arose. It seems like you can’t shove advertising into it, punto is free of itself ... Just Yandex got a popular chip, “for image”? Well, maybe. However, it seems to me that such a massive program can be used for research purposes. Details under the cut.
This is what AVZ gives out at every check:
C: \ Program Files \ Punto Switcher \ pshook.dll -> Suspicion of Keylogger or Trojan DLL C: \ Program Files \ Punto Switcher \ pshook.dll >>> Behavioral Analysis 1. Responds to events: keyboard, mouse 2. Transmits data to the process: 2100 C: \ Program Files \ Punto Switcher \ punto.exe (window = "Punto Switcher Main Window") 3. Find out which window is in focus. 4. Interrogates the state of the keys 5. Interrogates keyboard status 6. Polls the active keyboard layout. C: \ Program Files \ Punto Switcher \ pshook.dll >>> Neural Network: a file with a probability of 83.43% is similar to a typical keyboard / mouse event interceptor
It is clear that this is not a malicious keylogger at all. It is simply not possible that punto helps track audience preferences. So, perhaps, the guys oriented themselves in time and turned the little program into an ideal marketing tool. ')
PS Perhaps someone has already written about this, but the search did not give anything.Perhaps I am mistaken, but this is just a hypothesis.No more than a guess.