Home Malware Programs Keyloggers KBMonitor

KBMonitor

Posted: March 28, 2006

KBMonitor is a keylogger that records all user keystrokes. It stores gathered information in encrypted files on the compromised PC. The application must be manually installed. It runs on every Windows startup.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 install.exe
    2 keys32.dll
    3 krec32.dll
    4 krec32.exe
    5 runtime.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunkrec32
Loading...