Summary

Summary
Action
More Information
| Detected by | All Sophos products |
|---|---|
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action

Summary
Action
More Information
Please follow the instructions for removing Trojans.
Please read the instructions for removing Trojans.
More Information
Troj/Keylog-I copies itself to the Windows system folder as MSKHPK.EXE and adds the following registry entry to run the Trojan on system restart:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\TwkCplDaemon =
"C:\<Windows system>\MSKHPK.EXE"
Troj/Keylog-I also drops a plugin within the Windows system folder as MSKHPK.DLL.
The Trojan attempts to log keystrokes and then email the keylogged information to an external address via smtp.
