Why does my security software detect Xfire as a keylogger?
The file that is actually causing this false positive is xfire_toucan_xxxxx.dll. This dll will hook into windows watching for keyboard and mouse activity. The reason it does this is for our ‘auto-afk’ feature which you can enable on the Tools | Options | Privacy tab. In order to know whether or not you’re afk, we have to monitor the keyboard. We also use toucan to do In-Game messaging. For In-Game it actually injects itself into every running process to determine if it’s a game, and if it is a game, whether or not it supports XIG and should ‘hook in’ to the process.
