Updated: February 13, 2007 11:37:18 AM
Type: Spyware
Version: v2.80
Publisher: SpyArsenal.com - KMiNT21 Software
Risk Impact: High
File Names: FamilyKeyLogger-setup.exe; ctfmon.dll; ctfmon.exe
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP
The Spyware.FamilyKeylog installation path is configurable. The default is %System%\CTF.
Note: %System% is a variable. The Spyware.FamilyKeylog locates the System folder and copies itself to that location. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
When Spyware.FamilyKeylog is executed, it performs the following actions:
- Creates the registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\KMiNT21\FamilyKeyLogger
- Records the keystrokes and activity on your computer to the file, Ctfmon.txt. This file is located in the spyware's installation folder.