Keyboard Express

Description: Keylogger
Risk Level: Low
Date of First Occurence: Monday, April 21, 2008
Software Developer: (unknown)
Brief Info: Keyloggers invisibly monitor and record all of your computer activity. This information is then automatically emailed to an anonymous user.
Removal: This threat can be removed using "Spyware Terminator"

SUPPRIMER SPYWARE »

Geographical Distribution of Threat "Keyboard Express"

Threat Info

View All

Detected Items

  1. Detected Files: %PROGRAMFILES%\Keyboard Express 3\UnInstHKCU.exe MD5: B1D4867484439AA635408EE723B02379 Size:155472 MD5: D1E9555F2579ECA58661F8D764ACD989 Size:85104 %PROGRAMFILES%\Keyboard Express 3\licprog.exe MD5: BB220607314B01D88771EBE91FC9EEFE Size:602448 MD5: 83379DB27BDE2395D80F586272F29BCB Size:636016 %PROGRAMFILES%\Keyboard Express 3\UNWISE.EXE MD5: 3A938ED2427DF10E571041069E6980CB Size:162304 %PROGRAMFILES%\Keyboard Express 3\keydef.exe MD5: EF38BD89E40B0A7CEC64AF9937E54AFD Size:444928 MD5: CA356C71A6C5ED65D883ADDA367CEBAA Size:441344 MD5: 5F0C301DD8600CE29D3A64ABA6E410A6 Size:465408 MD5: 339F7CB127F6BD0E787733AA5AC87ECE Size:439296 MD5: C9EEC10E9441ABAFA57B81644B1E7144 Size:421376 MD5: 54BCC4EEF4DF5C6E979E05BA313E0448 Size:408064 MD5: C5644132B5BDF1FDDAB0CD295A36924A Size:419328 %PROGRAMFILES%\Keyboard Express 3\kie.dll MD5: 4E18C20717748BB220E7C979D74824FB Size:452608 MD5: 3EE4C4A1BE4B518DBA1AD3CBA1F8B31A Size:452608 MD5: 22855883223927BD53F32A16CC9103A9 Size:452608 MD5: 51BC47A60712951DD5A8387FCADBFB61 Size:452608 MD5: B248C61D7EFCD2BFB71C85073A964425 Size:452608 MD5: 3E772717CA4F3695EEF3CC9833D7E019 Size:442880 %PROGRAMFILES%\Keyboard Express 3\keyexp.exe MD5: F64E0046FB4BF6A8A8351807AEFE9220 Size:2622976 MD5: 5E3EA88AC333AF3015C6927F653F0159 Size:2312704 MD5: A75E831DEE94A8AD9F75A2F581DE1DE4 Size:2305024 MD5: 1CB59E69597A0BBB18E549271A4D7267 Size:2753024 MD5: 8E47CA2E7243E79218514F2E24C7EC52 Size:1732608 MD5: 73400A229DDF96C8487C5F34DD193A7B Size:1670656 MD5: 8FC54A844D643F0F01AEF0E91250DE52 Size:1563648 MD5: 93602A3027D6DC336C7F69B9DA5BA17E Size:1614336 %PROGRAMFILES%\Keyboard Express 3\KEYHOOK.DLL MD5: BD52F62E677BDDA75F6030D2B852C404 Size:46080 MD5: 4E38CA9E0FDD91765B7B415C7EB773A8 Size:46080 MD5: DA766C7C18980AE8FD5B43ED1B905536 Size:46080 MD5: ECA09008714567FEB1C06257B449574B Size:46080 MD5: 75237668FD018F58E0FC0BEBFE71A9CB Size:44544 MD5: 088394211AB3CA75F768DDB1467E4771 Size:46080
  2. Detected Files with variable Filenames: MD5: 57B719B2F2EFFC5C23ED3CCBABCCB918 Size: 46080 %PROGRAMFILES%\Keyboard Express 3\keyhook.dll %PROGRAMFILES%\Keyboard Express 3\KEYHOOK.DLL.ren MD5: 8E47CA2E7243E79218514F2E24C7EC52 Size: 1732608 %PROGRAMFILES%\Keyboard Express 3\keyexp.exe %PROGRAMFILES%\Keyboard Express 3\keyexp.exe.ren

Detecting items list:

  1. Files by Name %PROGRAMFILES%\Keyboard Express 3\keydef.exe %PROGRAMFILES%\Keyboard Express 3\keyexp.exe %PROGRAMFILES%\Keyboard Express 3\keyhook.dll %PROGRAMFILES%\Keyboard Express 3\kie.dll %PROGRAMFILES%\Keyboard Express 3\UNWISE.EXE %START_PROGRAMSALL%\Keyboard Express 3.lnk %ALLUSERS_APPDATA%\Insight Software Solutions\Keyboard Express\KeyExp.tdl
  2. Files by Directories %PROGRAMFILES%\Keyboard Express 3 %ALLUSERS_APPDATA%\Insight Software Solutions\Keyboard Express
  3. Files by CLSID or Name CLSID=42A7CE31-CEE7-4CCE-A060-A44A7E52E062
  4. Registry Keys HKCR\.ke2 HKCR\.kex HKCR\KeyboardExpress.multi HKCR\kie.WatchBrowser HKCU\Software\Insight Software Solutions\Keyboard Express HKCU\Software\Insight Software Solutions\Quick Start Guide HKCU\Software\Insight Software Solutions\Quick Start Guide\Keyboard Express 3 HKLM\SOFTWARE\Insight Software Solutions\Keyboard Express HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Keyboard Express 3

« Go to Software Database