Save Keys

Save Keys is a Commercial Key logger which runs undetected and logs all keys typed on computer.Save Keys allows monitoring and recording all system keystrokes, websites visited, windows viewed, applications ran, internet connections, passwords used. It includes elevated threats that are typically installed without adequate notice and consent, and may make unwanted changes to system, such as reconfiguring browser’s homepage and search settings. These threats may install advertising-related add-ons, including toolbars and search bars, or insert advertising-related components into the Winsock Layered Service Provider chain.0

General information:

Malware Name: Save Keys
Malware Type: Key Logger
Company Name: Alpine Snow
Company URL: http://alpinesnow.com/
Threat Level: Elevated Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation.

Company Description:

Alpine Snow specializes in surveillance and password recovery software and services. It provides various software for the security of PC’s Save Keys Undetectable 6.2, Save Keys Undetectable 6.2 , Save Keys Undetectable 6.2, Save Keys Undetectable 6.2 etc. Save Keys 6.0 is a completely invisible key recorder that secretly records every key typed into the keyboard along with the window title of the window or program that the keys were typed into. Save Keys 6.0 makes encryption of mail, messages, and passwords completely useless because these can be saved to file before they are encrypted.

Spyware Description:

Save Keys is a Commercial Key logger which runs undetected and logs all keys typed on computer.Save Keys allows monitoring and recording all system keystrokes, websites visited, windows viewed, applications ran, internet connections, passwords used. It includes elevated threats that are typically installed without adequate notice and consent, and may make unwanted changes to system, such as reconfiguring browser’s homepage and search settings. These threats may install advertising-related add-ons, including toolbars and search bars, or insert advertising-related components into the Winsock Layered Service Provider chain.0

Characteristics/Symptoms:

    -> Monitor and capture data from computers -> Run in stealth mode -> Intercepts keystrokes from the keyboard and records them in a log -> Starts with the operating system0

Additional information might be found here:

google Search at Google for Save Keys
bing Search at Bing for Save Keys
yahoo Search at Yahoo for Save Keys

Processes Running:

SK60.exe

File information Created after Installation:

File Location Size (Bytes) Type
C:\Documents and Settings\User\Start Menu\Programs\Save Keys\Readme.lnk 510 Shortcut
C:\Program Files\SK60\Sk60.hlp 9587 Help File
C:\Program Files\SK60\UNWISE.EXE 162304 Application

Folder information Created after Installation:

Folder Location
C:\Program Files\SK60

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Run SK60
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices SK60