IdeaCentre Desktops & Home Servers

[#1]

I have an IdeaSystem desktop.  SkDaemond popped up on a reboot as a German lang application.  Playing with Google and other searches and links, I find this to be both the keyboard driver and to be the name of some kind of keystroke logger trojan.  This having potentially devastating results I am in a holding pattern on this system until I understand why this popped up as an app, since it never had done so in the past.

I would appreciate some insight as to why it popped up, confirm that in normal operation it is part of the 32 bit OS (Vista 64 bit OS currently), and what is functions is as well as how it works when functioning normally.

Thanks

[#2]

It seems that some malware is running under the process of the keyboard driver.Did you run a malware check?Using malware bytes or perhaps Miscrosoft security essentials?

[#3]

That was my suspicion as I already had the keyboard working.  It acted as it what ever was loading with this process didn't quite make it. 

I'll do a quick survey of the registry to see if anything pops out while the malware scanners and AV interrogate the system.

[#4]

lbfd09,

Thanks for reporting this.  Please keep us posted as you go through your system...

In the meantime, could you share a few details about what model system you have?  IdeaCentre desktop model ?    Was this purchased directly from Lenovo or through a reseller?

I'm glad you found the forum and joined to share your experience - I hope you will continue to participate in the future.    I also wanted to be sure you had the appropriate support numbers in case you need technical support or service.  Here is a link to the support site with list of support numbers for the IdeaCentre products, by country.

Glad you found this!

Best regards,

Mark

[#5]

I lost the app window thanks to a power outage.  It did not return and so far three of my malware scanners did not detect this.  My reg scan that I manually did showed nothing unusual, but I was only seeking out with the string "SkDaemond." 

Am I correct in presuming that somehow there was a call to SkDaemond with no app nor a TSR toggle is the reason that I saw the window?

This is an IdeaSystem K-Series 210 I think.  I am currently on Vista 64bit w/all the current updates applied.  I got this from Cicuit City just before they locked the doors.  The system has been working flawlessly wit just this little quirk.

[#6]

I am having the problem.  It occur after my computer download the updates, only happened about a week ago.  Ran all the virus scan but did not pick up anything.  I brought my desktop at FRYS Ideacentre K-series. any suggestions