SaveMyWork
|
Description:
|
Keylogger
|
|
Risk Level:
|
Critical
|
|
Date of First Occurence:
|
Thursday, June 12, 2008
|
|
Software Developer:
|
(unknown)
|
|
Brief Info:
|
Keyloggers invisibly monitor and record all of your computer activity. This information is then automatically emailed to an anonymous user.
|
|
Removal:
|
This threat can be removed using "Spyware
Terminator"
|
ENTFERNEN SPYWARE »
Geographical Distribution of Threat "SaveMyWork"
Threat Info
View All
Detected Items
- Detected Files:
%PROGRAMFILES%\Emsa Save My Work\unins000.exe
MD5: BF15CE70E055955FAFD81A18EC1C0771 Size:77257
%PROGRAMFILES%\Emsa Save My Work\SaveMyWork.exe
MD5: 7E9B829A0BA921D2DF91EB339494FB6A Size:487424
MD5: 9C5C938D295D71BB7B6A4DF6B3A79C15 Size:471040
- Detected Files with variable Filenames:
Detecting items list:
- Files by Name
%ProgramFiles%\Emsa Save My Work\actcode_savemywork.dat
%ProgramFiles%\Emsa Save My Work\Emsa Systems Website.url
%ProgramFiles%\Emsa Save My Work\SaveMyWork.exe
%ProgramFiles%\Emsa Save My Work\SaveMyWork.ini
%ProgramFiles%\Emsa Save My Work\unins000.dat
%ProgramFiles%\Emsa Save My Work\unins000.exe
%START_PROGRAMSALL%\Emsa Save My Work\Emsa Save My Work on the web.lnk
%START_PROGRAMSALL%\Emsa Save My Work\Emsa Save My Work.lnk
%DESKTOP%\Emsa Save My Work.lnk
- Files by Directories
%ProgramFiles%\Emsa Save My Work
%START_PROGRAMSALL%\Emsa Save My Work
- Registry Keys
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Emsa Save My Work_is1
- Registry Values
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ValueName=SaveMyWork
«
Go to Software Database
