Spyware.IkitecKL

When Spyware.IkitecKL is installed, it performs the following actions:

1. Adds the value:
   
   "(Default)"="%ProgramFiles%\Auto Keylogger\kl.exe"
   
   to the registry key:
   
   HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\kl.exe
   
   Note: %ProgramFiles% is a variable that refers to the program files folder. By default, this is C:\Program Files.
   
   
2. Adds the values:

"DisplayName"="Auto Keylogger 5.2"
"UninstallString"="%ProgramFiles%\Auto Keylogger\uninst.exe"
"DisplayIcon"="%ProgramFiles%\Auto Keylogger\kl.exe"
"DisplayVersion"="5.2"
"NSIS:StartMenuDir"="Auto Keylogger"
"URLInfoAbout"="http:/ /www.ikitek.com"
"Publisher"="Ikitek Software"    
to the registry key:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Auto Keylogger

3. Adds the value:

"WndMsg"="%ProgramFiles%\Auto Keylogger\klkernel.exe"
to the registry key:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

so the spyware runs every time that Windows starts.

4. Adds the value:

"WndMsg"="%ProgramFiles%\Auto Keylogger\klkernel.exe"
to the registry key:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices

so the spyware is run as a service every time Windows 95/98/Me starts.

5. Creates the following files:

• %ProgramFiles%\Auto Keylogger\klkernel.dat
• %ProgramFiles%\Auto Keylogger\kl.hlp
• %ProgramFiles%\Auto Keylogger\kl.exe
• %ProgramFiles%\Auto Keylogger\kl.cnt
• %ProgramFiles%\Auto Keylogger\kbhook4.dll
• %ProgramFiles%\Auto Keylogger\whatsnew.txt

Summary