Guardian Monitor

Popis: Keylogger
Úroveň rizika: Nízké
Datum 1. výskytu: Wednesday, July 16, 2008
Poskytovatel Softwaru: (neznámá)
Stručné informace: Keyloggers invisibly monitor and record all of your computer activity. This information is then automatically emailed to an anonymous user.
Odstranění: Tento škodlivý software může být odstraněn pomocí "Spyware Terminatora"

Geogr. rozdělení softwaru "Guardian Monitor"

Info o škodlivém softwaru

Zobrazit vše

Detected Items

  1. Detected Files: %SYSDIR%\GDSys\ipworks5.dll MD5: 46B59D9BD81FDCF84CDE89F6DE725001 Size:399624 %SYSDIR%\GDSys\zlib-1.dll MD5: 8EAD44B60ED70B53CDC47B9D7A5714C7 Size:80954 %SYSDIR%\GDSys\LTKRN13N.dll MD5: A1124ABBD43ADA5EC57ADC92410BCA10 Size:453120 %SYSDIR%\GDSys\dten600.dll MD5: B2C36C79DCBC15F49D954D0A077F0555 Size:1892352 %SYSDIR%\GDSys\C4DLL.DLL MD5: CFCF86BA9FF97097CC91AD2952CA5C39 Size:438272 %SYSDIR%\GDSys\gdmgr.exe MD5: 5EE15623839A8B6A5F1F4A904721EB4A Size:673432 MD5: 81B3AC35E74B4CE8C38C5643D853CFFE Size:748544 %SYSDIR%\GDSys\GDH.dll MD5: BA103FDD8C21190A941C06A6CFCA0B4A Size:211280 MD5: DA8A395BAD299AF7F4E67E827381E2D3 Size:219748 MD5: DA8A395BAD299AF7F4E67E827381E2D3 Size:4294967295 %SYSDIR%\GDSys\BACKUP\instlsp.exe MD5: 191B728346EC50EB93581022AEB518F6 Size:77824 %SYSDIR%\GDSys\BACKUP\gdntfy.exe MD5: FDE934943E063B6A608EBE074C8EDB77 Size:118784 %SYSDIR%\GDSys\BACKUP\GDMgr.exe MD5: BE39EFDAA2623B2B089241308CA0794A Size:730436 %SYSDIR%\GDSys\BACKUP\gdkeeper.exe MD5: BB187C863AA1288F4C0F126C65CC1D3D Size:45056 %SYSDIR%\GDSys\BACKUP\GDH.dll MD5: A42421D1D60D58A0FDF00D0DB3A94562 Size:227940 %SYSDIR%\GDSys\BACKUP\gdext.dll MD5: A1D6FBAC4501FC1A89B7641AA5F3621B Size:57344 %SYSDIR%\GDSys\vbalFlBr6.dll MD5: 9FDB8A72D927888796A4E6A14560CC5F Size:40960 %SYSDIR%\GDSys\SSubTmr6.dll MD5: 1556C5B52A751C31B4CA6FE757704131 Size:40960 %SYSDIR%\GDSys\SpOrder.Dll MD5: B4EFC7E8EDC0D1E2E81D81FA092AC8C4 Size:8704 %SYSDIR%\GDSys\instlsp.exe MD5: B36E94FCA30A169E753A96E644EB5F25 Size:77824 %SYSDIR%\GDSys\gsp.dll MD5: EBDBC35AAA7FDF8286A1CEF8AE955D70 Size:114688 %SYSDIR%\GDSys\GDUpdate.exe MD5: 755520AB6FB00C49D59C2A3A98D99A8A Size:724992 %SYSDIR%\GDSys\gdntfy.exe MD5: 132970B403B4A3EF6CAD1692AF38DA19 Size:114688 %SYSDIR%\GDSys\gdkeeper.exe MD5: 447A67C7D73E72D240DB881FACD78C4A Size:45056 %SYSDIR%\GDSys\gdext.dll MD5: FE8E27FAC949A6384EEBC99AD7F28EF6 Size:57344 %SYSDIR%\GDSys\eztoolslib.dll MD5: 7590B64A5CDF0832DA52E47AC201440E Size:536576 %SYSDIR%\GDSys\ExCalendar.dll MD5: E7D40CD7E00E1864D5622B95BC33AA08 Size:294912 %SYSDIR%\GDSys\dXTList.dll MD5: 225AC91940123ABF94A50320F1A517FD Size:424448 %SYSDIR%\GDSys\dbghelp.dll MD5: 3B5F0BF4125688A531FA21C823EA6193 Size:813568 %SYSDIR%\GDSys\vbalTab6.ocx MD5: BD3E6B6E714A0AF9CFB92788E92B884E Size:61440 MD5: BD3E6B6E714A0AF9CFB92788E92B884E Size:4294967295 %SYSDIR%\GDSys\UNWISE.EXE MD5: 973567B98CDFC147DF4E60471D9DF072 Size:153088 MD5: 973567B98CDFC147DF4E60471D9DF072 Size:4294967295 %SYSDIR%\GDSys\smtp50.ocx MD5: 829E7DD53874F7C649B750422E2BE4B8 Size:141576 MD5: 829E7DD53874F7C649B750422E2BE4B8 Size:4294967295 %SYSDIR%\GDSys\SmartUI2.ocx MD5: ACE50C780D55E6BA472C9AE13E3F42A7 Size:874248 MD5: ACE50C780D55E6BA472C9AE13E3F42A7 Size:4294967295 %SYSDIR%\GDSys\mx50.ocx MD5: B64DDB575C9FA8DDEC5111CC853D1A5D Size:112904 MD5: B64DDB575C9FA8DDEC5111CC853D1A5D Size:4294967295 %SYSDIR%\GDSys\msmask32.ocx MD5: F0AC7872C32CD3AEB4FC9EAC782C6F37 Size:166600 MD5: F0AC7872C32CD3AEB4FC9EAC782C6F37 Size:4294967295 %SYSDIR%\GDSys\GDAdmin.exe MD5: 44EDA81E52A69DB4744B688B5770143C Size:1073152 MD5: 44EDA81E52A69DB4744B688B5770143C Size:4294967295 %SYSDIR%\GDSys\ezAVI26.ocx MD5: 1638D9C724095DC2895C6B4E87D5D913 Size:81920 MD5: 1638D9C724095DC2895C6B4E87D5D913 Size:4294967295 %SYSDIR%\GDSys\GDMgr.exe MD5: A38609CA6A94DA6A3D5F3F3AA8F06A20 Size:693740 MD5: A38609CA6A94DA6A3D5F3F3AA8F06A20 Size:4294967295
  2. Detected Files with variable Filenames: MD5: D56DF2F8517F44A82F2C8D43222F07B5 Size: 122880 %SYSDIR%\GDSys\BACKUP\gsp.dll %SYSDIR%\GDSys\BACKUP\gsp.001

Detecting items list:

  1. Files by Name %SYSDIR%\GDSys\ezAVI26.ocx %SYSDIR%\GDSys\GDAdmin.exe %SYSDIR%\GDSys\GDConfig.dat %SYSDIR%\GDSys\GDH.dll %SYSDIR%\GDSys\GDMgr.exe %SYSDIR%\GDSys\guardian.css %SYSDIR%\GDSys\INSTALL.LOG %SYSDIR%\GDSys\logo.jpeg %SYSDIR%\GDSys\msmask32.ocx %SYSDIR%\GDSys\mx50.ocx %SYSDIR%\GDSys\rrinstall.exe %SYSDIR%\GDSys\SmartUI2.ocx %SYSDIR%\GDSys\smtp50.ocx %SYSDIR%\GDSys\UNWISE.EXE %SYSDIR%\GDSys\vbalTab6.ocx %DESKTOP%\GuardianMonitor.lnk
  2. Files by Directories %SYSDIR%\GDSys
  3. Registry Keys HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Guardian Software
  4. Registry Values HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ValueName=GDMgr

« Jít do Databáze softwaru