[UPDATE 3/31/11: Samsung has issued a statement saying that the finding is false. The statement says the software used to detect the keylogger, VIPRE, can be fooled by Microsoft's Live Application multi-language support folder. This has been confirmed at F-Secure and two other publications, here and here.The headline on this article has been changed to reflect this new information.]
[UPDATE 3/31/11: GFI Labs, the maker of VIPRE, has issued an explanation and apology for generating the false positives that led to these articles: "We apologize to the author Mohamed Hassan, to Samsung, as well as any users who may have been affected by this false positive."]
Remember a few years ago Mark Russinovich busted Sony for covertly installing a root kit on computers when listening to music distributed by Sony? Turns out Samsung is doing something similar. Their root kit includes a key logger which is installed for free on select Samsung laptop computers. From the time the computer was taken out of the box their rootkit/key logger has been secretly capturing login IDs and passwords. Have a Samsung? Look for the key logger in your c:\windows\SL directory.