Spyware.KGBSpy

Behavior

Spyware.KGBSpy is a commercial spyware program. It logs keystrokes, Web sites visited, and clipboard activity. It also has a screen capture logger and can be run automatically in a silent, undetectable mode.

This spyware can use FTP or email to send all the logs to a remote server or email address.

These actions are configured in the program's Control panel of Systems.exe. When the program is in Hidden Mode, it cannot be accessed until it is brought out of Hidden Mode. This can be done with a hot-key combination (the default combination is Ctrl+Alt+Shift+K).

Symptoms

The files are detected as Spyware.KGBSpy.

Transmission

KGB Spy Software must be manually installed.

Protection

• Initial Rapid Release version May 25, 2005
• Latest Rapid Release version November 21, 2009 revision 020
• Initial Daily Certified version May 25, 2005 revision 007
• Latest Daily Certified version November 21, 2009 revision 021
• Initial Weekly Certified release date May 25, 2005

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.