ArdamaxKeylogger.1

Description: Keylogger
Risk Level: Low
Date of First Occurence: Tuesday, December 09, 2008
Software Developer: (unknown)
Brief Info: Keyloggers invisibly monitor and record all of your computer activity. This information is then automatically emailed to an anonymous user.
Removal: This threat can be removed using "Spyware Terminator"

RIMUOVI SPYWARE »

Geographical Distribution of Threat "ArdamaxKeylogger.1"

Threat Info

View All

Detected Items

  1. Detected Files: %PROGRAMFILES%\YNS\Uninstall.exe MD5: E8B8020BD7E953BC849AA4F8C15F1D86 Size:45188 %PROGRAMFILES%\YNS\primeiras_carcias.exe MD5: 30A2837DF11FC3B02311C4C550898723 Size:1794699 %PROGRAMFILES%\YNS\AKV.exe MD5: 7D44BD2F6A6158D6C796810DDEEA8B0F Size:201728 %PROGRAMFILES%\YNS\YNS.exe MD5: 2B8DEF730C5BAB9D9B58E117AF9FB84A Size:302080
  2. Detected Files with variable Filenames:

Detecting items list:

  1. Files by Name %PROGRAMFILES%\YNS\AKV.exe %PROGRAMFILES%\YNS\Uninstall.exe %PROGRAMFILES%\YNS\YNS.exe %SystemDiskRoot%\Documents and Settings\User\Start Menu\Programs\Ardamax Keylogger\Ardamax Keylogger.lnk %SystemDiskRoot%\Documents and Settings\User\Start Menu\Programs\Ardamax Keylogger\Help.lnk %SystemDiskRoot%\Documents and Settings\User\Start Menu\Programs\Ardamax Keylogger\Log Viewer.lnk
  2. Files by Directories %PROGRAMFILES%\YNS
  3. Registry Keys HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ardamax Keylogger
  4. Registry Values HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Ardamax Keylogger ValueName=Order HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ValueName=YNS

« Go to Software Database