I want to install a key-logger on one of my computers, but every time i try to unzip the setup files windows (xp pro sp2) automatically deletes the files because he recognizes it as malware (even though it is a legit application).
I've unzipped it on two computers and the same thing happens.
I was able to install it on a VM xp pro but when tried to copy the extracted file to xp it was also immediately deleted.
I doubt Windows itself will be deleting the files. A resident Antivirus or Spyware program probably would though.
By their very nature keyloggers are in fact spyware, even though the application might be legitimate.
Is the virtual machine just running the Operating System with no security software (antivirus, spyware or malware applications)? If it is, this would explain why the keylogger can be successfully installed and run in a VM environment with no problems.
no application was executed, maybe one of windows services is doing it.
i've found a few references to the phenomenon when i googled the error message text which but no proper solution was mentioned, just non-effective methods to buypass to auto-delete when extracting (the message is a winzip error). when i extracted it on the VM and tried to copy it to the host the file was auto-deketed with no error or any indication, i didn't had a chance to even see it, like it was never copied.
Before you try to extract the file, open the task manager. Check the processes in your task manager. You can arrange them by cpu%. When you try to install the program, something is kicking off to block it. It will pop up in the cpu usage.