Codename Alvin

'Codename Alvin', the PC Super Spy software for Microsoft Windows. Codename Alvin, 'PC Super Spy' software for Windows, has been developed to allow, the PC owner, to monitor what our computer is being used for. It also includes severe risk threats that are typically installed without user interaction through security exploits, and may allow an attacker to remotely control the infected machine. Such threats may allow the attacker to install additional malware and use the compromised machine to participate in denial of service attacks, spamming, and bot nets, or to transmit sensitive data to a remote server. The malware may be cloaked and not visible to the user.0

General information:

Malware Name: Codename Alvin
Malware Type: Key Logger
Company Name: Codename Alvin
Company URL: http://codenamealvin.com/
Threat Level: Severe Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation

Company Description:

'Codename Alvin' allows the owner of the computer to monitor keyboard, internet, screen and application activity. This allows the parent to start the software, shut down their pc, then go to work. Should the children start the PC up while the parent is away,    Alvin will log their activity, the websites they access, and their conversation in the chat rooms. Alvin is also in use by clients who do not want to hide the software at all; they just want to simply keep a log of what they have been doing on the net so they can go back later without having to keep tracks while they are working.

Spyware Description:

'Codename Alvin', the PC Super Spy software for Microsoft Windows. Codename Alvin, 'PC Super Spy' software for Windows, has been developed to allow, the PC owner, to monitor what our computer is being used for. It also includes severe risk threats that are typically installed without user interaction through security exploits, and may allow an attacker to remotely control the infected machine. Such threats may allow the attacker to install additional malware and use the compromised machine to participate in denial of service attacks, spamming, and bot nets, or to transmit sensitive data to a remote server. The malware may be cloaked and not visible to the user.0

Characteristics/Symptoms:

    -> Intercepts keystrokes from the keyboard and records them in a log -> Hidden from the User -> Run in stealth mode -> Monitor and capture data from computers0

Additional information might be found here:

google Search at Google for Codename Alvin
bing Search at Bing for Codename Alvin
yahoo Search at Yahoo for Codename Alvin

Processes Running:

cnalvin.exe

File information Created after Installation:

File Location Size (Bytes) Type
C:\Documents and Settings\User\Start Menu\Programs\Coding Workshop\Codename Alvin.lnk 574 Shortcut
C:\Program Files\Coding Workshop\UNWISE.EXE 165376 Application
C:\WINDOWS\system32\Sslstbar.ocx 253 ActiveX Control

Folder information Created after Installation:

Folder Location
C:\Program Files\Coding Workshop

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Codename Alvin Changed
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Codename Alvin SlowInfoCache
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Codename Alvin Contact