Spyware.KBGuardian

The Spyware.KBGuardian installation path is configurable. The default is %ProgramFiles%\Diplodock\Keyboard Guardian Trial.

Note: %ProgramFiles% is a variable that refers to the program files folder. By default, this is C:\Program Files.

When Spyware.KBGuardian is executed, it performs the following actions:

1. Creates the registry keys:
   
   HKEY_CURRENT_USER\SOFTWARE\VB and VBA Program Settings\AJksfRqwsw
   HKEY_CURRENT_USER\SOFTWARE\VB and VBA Program Settings\Keyboard Guardian
   
   
2. Creates the following shortcut so that the program is started with Windows:
   
   %AllUsersProfile%\Start Menu\Programs\Startup\Keyboard Guardian.lnk
   
   Note: %AllUsersProfile% is a variable that refers to the "All Users" profile folder. By default, this is C:\Documents and Settings\All Users (Windows NT/2000/XP).
   
   
3. Creates the following files:
   • %ProgramFiles%\Diplodock\Keyboard Guardian Trial\Readme.txt
   • %ProgramFiles%\Diplodock\Keyboard Guardian Trial\Readme.pdf
   • %ProgramFiles%\Diplodock\Keyboard Guardian Trial\Readme.doc
   • %ProgramFiles%\Diplodock\Keyboard Guardian Trial\KW.OP4 (configuration file)
   • %ProgramFiles%\Diplodock\Keyboard Guardian Trial\KW.OP3 (configuration file)
   • %ProgramFiles%\Diplodock\Keyboard Guardian Trial\KW.OP2 (configuration file)
   • %ProgramFiles%\Diplodock\Keyboard Guardian Trial\KG.exe (this file is detected as Spyware.KBGuardian)
     
     
4. Creates a group in the Start Menu named "Diplodock\Keyboard Guardian Trial."
   
   
5. Stores log files as *.log files in %ProgramFiles%\Diplodock\Keyboard Guardian Trial\

Summary