Spyware/Key Logger/Spy.GhostKeyLogger

Alias: Ghost Keylogger, Win32/GhostKeyLogger.a!Spy!Troja, destructive program, TrojanSpy.Win32.GhostKeyLogger.a, GhostKeyLog.dll

Description: Ghost Keylogger is Key Logger. Runs silently, captures keystrokes. From the publisher: 'install the keylogger in a directory that is hard to find. Ghost Keylogger is an invisible easy- to-use surveillance tool that records every keystroke to an encrypted log file. The log file can be sent secretly with email to a specified receiver Ghost Keylogger also monitors the Internet activity by logging the addresses of visited homepages. It monitors time and title of the active application; even text in editboxes and message boxes is captured' Variants: Ghost Keylogger 3.0, Ghost Keylogger 3.53

Threat type:

Key Logger - A Key logger is a software application that runs in the background and records any keyboard activity. Logged information is stored in the machine and can be retrieved later by the attacker through the internet connection. Key loggers can record sensitive information such as passwords, credit card numbers, personal identification numbers, etc. Key loggers are commonly included as parts of other spyware programs.

Spyware - Spyware is any software application that gathers information from the user's PC and transmits it to the Spyware author (usually hackers, but sometimes corporations). The information is gathered and transmitted without the user's knowledge or consent. Spyware applications may steal sensitive corporate information and transmit it to competitors. Spyware also degrades PC performance and can consume huge amounts of bandwidth, especially on corporate servers.

Advice: Remove This is a very high risk threat and should be removed immediately as to prevent harm to your computer or your privacy.

Detection:
SpyNoMore detects Spyware/Key Logger/Spy.GhostKeyLogger: Yes

Threat risk: High Risk

Very dangerous malware. Can log user's keyboard activity and take snapshots of the user's screen. Uses stealth installation and removal is very difficult. Category includes spyware programs, adware programs and trojans.

Symptoms:

Spyware/Key Logger/Spy.GhostKeyLogger Signature Details: The following information includes some of the standard signatures associated with this spyware threat. Please do not attempt to manually remove these items from your computer; Removing these items incorrectly or partially can cause your computer to experience critical errors, prevent your computer from restarting or cause loss of Internet connectivity. Should you be infected with Spyware/Key Logger/Spy.GhostKeyLogger, you can clean your computer by downloading SpyNoMore now.

Running Process Signatures:
N/A

File Signatures:
%PROGRAM_FILES%\sync manager demo\faq.html
%PROGRAM_FILES%\sync manager demo\manual.html
%PROGRAM_FILES%\sync manager demo\agent\syncagent.dll
%PROGRAM_FILES%\sync manager demo\agent\syncagent.exe
%PROGRAM_FILES%\sync manager demo\syncconfig.exe

Registered Dll (Dynamic Link Library) Signatures:
N/A

Folder Signatures:
%PROGRAM_FILES%\sync manager

Registry Signatures:
N/A

SpyNoMore Collected Residual File Signatures:
N/A

See Also:
Dropper/Die_Lamer.1090
Dropper/HLLP.Nutmeg.3327
Dropper/Natas.4988
Dropper/Yesmile.5504.C
Dropper/DHeart.452.a
Trojan/Games Prank
Trojan/Little Pink Prank
Trojan/SillyMonkey Prank
Trojan/SurfThis Prank
Trojan/Wind Prank