WALogger

Description: Keylogger
Risk Level: High
Date of First Occurence: Tuesday, July 10, 2007
Software Developer: (unknown)
Brief Info: Keyloggers invisibly monitor and record all of your computer activity. This information is then automatically emailed to an anonymous user.
Removal: This threat can be removed using "Spyware Terminator"

SCAN & REMOVE NOW »

Geographical Distribution of Threat "WALogger"

Threat Info

View All

Detecting items list:

  1. Files by Name %sysdir%\UNIPro4TCBS.ocx %sysdir%\WALI\SVCS\readme.txt %sysdir%\WALI\SVCS\SERVICES.EXE %sysdir%\WALI\SVCS\UGF.bin %sysdir%\WALI\SVCS\unins000.dat %sysdir%\WALI\SVCS\unins000.exe %sysdir%\WALI\SVCS\wali0 %sysdir%\WALI\SVCS\WALIHelp.chm %sysdir%\WALI\SVCS\WALIMAIN.exe %sysdir%\WALI\SVCS\WALIMAIN.exe.manifest %sysdir%\WALI.dll
  2. Files by Directories %sysdir%\WALI
  3. Files by CLSID or Name CLSID=68ACC1A8-CFFC-4163-8767-026232DB2697 CLSID=93AAC05D-B974-4770-A9EE-92EFE7A59A85
  4. Registry Keys HKLM\SOFTWARE\Classes\WALI.cWALIRun HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Windows Activity Logging Interface_is1 HKCU\Software\VB and VBA Program Settings\WALI
  5. Registry Values HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ValueName=WSVCS

« Go to Software Database