Sophos

Troj/Keylog-KE

Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
Included in our products from June 2008 (4.30)
Protection available since 24 April 2008 01:55:53 (GMT)
Detected by All Sophos products

Action

More Information

Troj/Keylog-KE copies itself to <System>\wuaucltl.exe.

Troj/Keylog-KE drops file <System>\pshelp.dll - also detected as Troj/Keylog-KE.

Troj/Keylog-KE registers itself as "system Idle Process" that starts up automatically.

Troj/Keylog-KE starts the process iexplore.exe and injects itself into it.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer