Backup Key

It is a Key logging program that saves all key strokes. It allows one to restore typed work, including its layout. It also monitors the programs that are used. [Windows 95/98/NT/ME/2000/XP]. It can be set to total invisibility, until you need it. Unlike other key-logging programs, Backup_key can also reconstruct the correct layout of your work.0

General information:

Malware Name: Backup Key
Malware Type: Key Logger
Company Name: Passware
Company URL: http://www.lostpassword.com/
Threat Level: Moderate Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation

Company Description:

Founded in 1998, Passware provides help desk personnel, law enforcement, forensic agencies, IT professionals, business and home users around the world with the security tools that they need to ensure data availability in the event of lost passwords. A few of its customers include: Microsoft, Adobe, Apple, Intel, Hewlett-Packard, Arthur Andersen, Deloitte & Touche, Ernst & Young, KPMG, PW Coopers, US Senate, NASA, FDA and IRS.

Spyware Description:

It is a Key logging program that saves all key strokes. It allows one to restore typed work, including its layout. It also monitors the programs that are used. [Windows 95/98/NT/ME/2000/XP]. It can be set to total invisibility, until you need it. Unlike other key-logging programs, Backup_key can also reconstruct the correct layout of your work.0

Characteristics/Symptoms:

    -> Starts with the operating system -> Run in stealth mode -> Intercepts keystrokes from the keyboard and records them in a log -> Monitor and capture data from computers0

Additional information might be found here:

google Search at Google for Backup Key
bing Search at Bing for Backup Key
yahoo Search at Yahoo for Backup Key

Processes Running:

File information Created after Installation:

File Location Size (Bytes) Type
C:\Documents and Settings\[USER]\Start Menu\Programs\Passware Demo\Backup Key Demo.lnk 682 Shortcut
C:\Program Files\Passware\demos\bckupkey.exe 733184 Application

Folder information Created after Installation:

Folder Location
C:\Program Files\Passware
C:\Program Files\Passware\demos

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindowsCurrentVersionUninstallBackup Key Demo DisplayName
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Backup Key Demo UninstallString