Home Malware Programs Keyloggers Smoking Gun

Smoking Gun

Posted: March 28, 2006

Smoking Gun! is a commercial PC surveillance tool that tracks user activity, logs keystrokes, takes periodic screenshots and records web sites visited. Gathered data is stored on the compromised PC. Smoking Gun! must be manually installed. It runs on every Windows startup.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 sentinelmon.exe
    2 smokinggun.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USERSoftwarePCSentinelSoftwarePCSentinelsSmokingGun!HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionAppPathssmokinggun.exeHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunsentinelmonHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallPCSentinelsSmokingGun!HKEY_LOCAL_MACHINESOFTWAREPCSentinelSoftwareHKEY_LOCAL_MACHINESOFTWAREPCSentinelSoftwarePCSentinelsSmokingGun!
Loading...