Home Malware Programs Keyloggers KeyLover

KeyLover

Posted: March 28, 2006

KeyLover is a commercial application that records user keystrokes and sends gathered data to a predefined e-mail address. Although KeyLover is a legitimate product, it can be used by hackers for obvious malicious purposes. The application comes with the uninstaller and must be manually installed. It runs on every Windows startup.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 keylover21.exe
    2 keyloverlite.exe
    3 kl21.dll
    4 kl21setup.exe
    5 kll.dll
    6 kllsetup.exe
    7 kuninst.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerFileExts.klgHKEY_LOCAL_MACHINESOFTWAREKernelTekKeyLoverHKEY_LOCAL_MACHINESOFTWAREKernelTekKeyLoverLite
Loading...