Content

Keylog-ABSpy.dr

Type
Program
SubType
Dropper
Discovery Date
08/05/2005
Minimum DAT
4551 (08/05/2005)
Updated DAT
4554 (08/09/2005)
Minimum Engine
5.1.00
Description Added
08/05/2005
Description Modified
12/23/2005 2:45 AM (PT)

Tab Navigation

Characteristics

McAfee(R) AVERT recognizes that this program may have legitimate uses in contexts where an authorized administrator has knowingly installed this application. If you agreed to a license agreement for this, or another bundled application, you may have legal obligations with regard to removing this software, or using the host application without this software. Please contact the software vendor for further information.

See http://vil.nai.com/vil/DATReadme.asp for a list of Program detections added to the DATs.

See http://vil.nai.com/vil/pups/configuration.htm for information about how to enable, disable, and exclude detection of legitimately installed programs.

Distribution

This is not a virus or a trojan. It is detected as a "potentially unwanted program." It is a system monitoring "spy" application designed to log all activity performed on the host computer. The host system can also be remotely configured/inspected using the "System Spy Server" companion application. A user interface is displayed on launching the installation executable. No license agreement is shown during installation.

Installation:

 File:   Absystemspy.Exe
Md5: 57cff5fd04806f33523af98353551893

The following folders were added:

  • %Documents and Settings%\All Users\Start Menu\Programs\SSystem v5.1.1 build 3
  • %Program Files%\SSystem v5.1.1 build 3

The following registry entries were added:

  •  HKEY_LOCAL_MACHINE\SOFTWARE\SSystem\Email
  •  HKEY_LOCAL_MACHINE\SOFTWARE\SSystem\FTP
  •  HKEY_LOCAL_MACHINE\SOFTWARE\SSystem\General
  •  HKEY_LOCAL_MACHINE\SOFTWARE\SSystem\Logs
  •  HKEY_LOCAL_MACHINE\SOFTWARE\SSystem\Scheduling
  •  HKEY_LOCAL_MACHINE\SOFTWARE\SSystem\ScreenCapture
  •  HKEY_LOCAL_MACHINE\SOFTWARE\SSystem\Security
  •  HKEY_LOCAL_MACHINE\SOFTWARE\SSystem\TCP/IP Ports

The following files were added to user's system:

  • system.exe
  • ijl15.dll
  • abss.chm
  • abss.url
  • defaults.reg
  • license.txt

This application is designed to capture all the keystrokes that are typed by the user.

For more information about Keylog-ABSpy visit the following link.
http://vil.nai.com/vil/content/v_119029.htm

Aliases

Aliases

    N/A