Spyware.KsLogger

Updated: February 13, 2007 11:37:52 AM

Type: Spyware

Version: 1.0.0.0

Publisher: KellySoftware

Risk Impact: High

File Names: Kslogger.exe,Sys007dll.dll,Sys007s.exe

Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

When Spyware.KsLogger runs, it performs the following actions:

Creates the following files in the folder that the individual running the installation can select:
- Kslogger.exe: This file configures the Key Logger.
- Sys007dll.dll: This file sets up the environment for Key Logger.
- Sys007s.exe: This file does the Key Logging.
Allows the person running the installation to select the following options:
- The location of the keystroke log file: The default location is C:\X.tmp.
- Turns On/Off the logging of the names of all opened windows.
- The location of the file for logging the names of all the opened windows. The default location is C:\X.tmp.
- The duration between logging the names of all the opened windows.
Adds the subkey:

Sys007s

to the registry key:

HKEY_CURRENT_USER\SOFTWARE
Adds the subkey:

Setting

to the registry key:

HKEY_CURRENT_USER\SOFTWARE\Sys007s

and adds the following values to the subkey:

"file"="C:\x.tmp""winfile"="C:\x.tmp"
Adds the subkey:

Settings

to the registry key:

HKEY_CURRENT_USER\SOFTWARE\Sys007s

and adds the following values to the subkey:

"getwins"="n" or "getwins"="y"
"timer"=""

Summary

Search Threats

Search by name

_{Example: W32.Beagle.AG@mm}