Ghost Adware

Name: Adware.Win32.Ghost Keylogger

Risklevel: Severe Risk
Company: Sureshot Software - http://keylogger.net/

Characteristics:

• It is an invisible that records every keystroke.
• It monitors the Internet activity by logging the addresses of visited homepages.

Installation: Installed through EXE
Process: syncconfig.exe
Used folders:

• C:\Program Files\Sync Manager Demo\agent
• C:\Program Files\Sync Manager Demo

Used files:

• C:\Program Files\Sync Manager Demo\manual.html
  [30026 Bytes] HTML Document
• C:\Program Files\Sync Manager Demo\agent\syncagent.exe
  [626688 Bytes] Application
• C:\Program Files\Sync Manager Demo\agent\syncagent.dll
  [258048 Bytes] Application Extension
• C:\Program Files\Sync Manager Demo\syncconfig.exe
  [663552 Bytes] Application
• C:\Program Files\Sync Manager Demo\faq.html
  [29722 Bytes] HTML Document
• C:\Program Files\Sync Manager Demo\agent\syncagent.cfg
  [2641 Bytes] Microsoft Office Outlook Configuration File