Home Malware Programs Keyloggers Powered Keylogger

Powered Keylogger

Posted: March 28, 2006

Powered Keylogger is a commercial PC surveillance application that tracks user local and Internet activity, logs all keystrokes and mouse clicks, takes screenshots, captures all outgoing and received e-mail messages and records passwords. Gathered data can be silently sent to a configurable e-mail address. Powered Keylogger hides all its files and folders and therefore is very difficult to detect and remove. The software automatically runs on every Windows startup. It works as a computer service.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 elpow_spy.sys

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServiceselpow_spyHKEY_LOCAL_MACHINESystemCurrentControlSetEnumRootLEGACY_ELPOW_SPY

Related Posts

Loading...