KeyCaptor
|
Description:
|
Keylogger
|
|
Risk Level:
|
Critical
|
|
Date of First Occurence:
|
Wednesday, April 23, 2008
|
|
Software Developer:
|
(unknown)
|
|
Brief Info:
|
Keyloggers invisibly monitor and record all of your computer activity. This information is then automatically emailed to an anonymous user.
|
|
Removal:
|
This threat can be removed using "Spyware
Terminator"
|
SCAN & REMOVE NOW »
Geographical Distribution of Threat "KeyCaptor"
Threat Info
View All
Detected Items
- Detected Files:
%WINDIR%\SystemSA32.dll
MD5: CFCCF23F185FC4EA4E94D906BB65A0AD Size:19168
MD5: 3ED3696203B51320525498696C180633 Size:28672
MD5: FBBFCC83F6262C881CAA9760F4754143 Size:27341
MD5: 6AC2143CAC8215617796178349E6406C Size:26598
MD5: F03F0391AB138B7E952F7DE8121BA88B Size:28672
- Detected Files with variable Filenames:
Detecting items list:
- Files by Name
%ProgramFiles%\KeyCaptor\KeyCaptor.exe
%ProgramFiles%\KeyCaptor\NoStealth.exe
%ProgramFiles%\KeyCaptor\Uninstal.log
%ProgramFiles%\KeyCaptor\Readme!.txt
%ProgramFiles%\KeyCaptor\license.txt
%ProgramFiles%\KeyCaptor\help.htm
%Windir%\kcopts.dat
%Windir%\NTInvisible.dll
%Windir%\SystemSA32.dll
%Windir%\spysplash.dat
%START_PROGRAMS%\Keycaptor\Help Documentation.lnk
%START_PROGRAMS%\Keycaptor\Keycaptor.lnk
%START_PROGRAMS%\Keycaptor\Remove Keycaptor.lnk
%START_PROGRAMS%\Keycaptor\Stop Stealth Mode.lnk
- Files by Directories
%ProgramFiles%\KeyCaptor
%START_PROGRAMS%\Keycaptor
- Registry Keys
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KeyCaptor
- Registry Values
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ValueName=Srv32Win
«
Go to Software Database