Spyware.Boolospy

Updated: August 12, 2006 11:05:05 AM

Type: Spyware

Risk Impact: High

Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP

SUMMARY

Behavior

Spyware.Boolospy is a spyware program that logs keystrokes.

Protection

Initial Rapid Release version December 15, 2000
Latest Rapid Release version December 15, 2000
Initial Daily Certified version December 15, 2000
Latest Daily Certified version December 15, 2000
Initial Weekly Certified release date August 16, 2006

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

TECHNICAL DETAILS

Spyware.Boolospy is a spyware program that logs keystrokes.

Once installed, the risk creates the following files:
JXKeyHook.dll
JXKey.exe
jxkeydat.sys
KeyLogViewer.exe

It then creates the following registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\"Login" = "YES"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"jx_Key" = "Rundll32 JXKey.dll,Rundll32Main"

The risk can be used to view keystrokes on the local computer and remote computers.