3ami MAS

3ami MAS is a tool for monitoring user's personal activities. It runs in stealth mode, hidden from the user, and have the ability to store captured data for later retrieval by or transmission to another computer0

General information:

Malware Name:	3ami MAS
Malware Type:	Key Logger
Company Name:	3ami Ltd
Company URL:	http://www.3ami.com/
Threat Level:	Elevated Risk
Operating System:	WIN XP
Installation Type:	Installed through EXE
Operation:	Time of After Installation

Company Description:

3ami Ltd is part of the Solution Profiling Group - Putting us in control. It provides us the keylogger 3ami MAS that is able to produce detailed forensic information and management reports on almost everything that our users do on our network. It also helps to ensure us that we are compliant by keeping a protective eye on our employees, IT assets and Intellectual Property.

Spyware Description:

3ami MAS is a tool for monitoring user's personal activities. It runs in stealth mode, hidden from the user, and have the ability to store captured data for later retrieval by or transmission to another computer0

Characteristics/Symptoms:

    -> Run in stealth mode -> Intercepts keystrokes from the keyboard and records them in a log -> Monitor and capture data from computers -> Starts with the operating system -> Hidden from the user0

Additional information might be found here:

	Search at Google for 3ami MAS
	Search at Bing for 3ami MAS
	Search at Yahoo for 3ami MAS

Processes Running:

SW.exe

File information Created after Installation:

File Location	Size (Bytes)	Type
C:\SYS.000\Ev.dl	unknown	DL File
C:\SYS.000\Evl.exe	126976	Application
C:\SYS.000\hostsw.exe	28672	Application

Folder information Created after Installation:

Folder Location

Registry information Created after Installation: