Winguardian

Winguardian is a keylogger that logs keystrokes of the PC in the background. It also takes screenshots, logs keystrokes, allows remote connections, and runs invisibly in the background. It logs websites visited by the user, and tracks all programs opened.

General information:

Malware Name:	Winguardian
Malware Type:	Keylogger
Company Name:	Webroot
Company URL:	http://www.webroot.com/
Threat Level:	Elevated Risk
Operating System:	WIN XP
Installation Type:	Installed through EXE
Operation:	Time of After Installation

Company Description:

Webroot provides you the software Winguardian that is a keylogger that logs keystrokes of the PC in the background. It also takes screenshots, logs keystrokes, allows remote connections, runs invisibly in the background, logs websites visited by the user, and tracks all programs opened. It logs user visited web sites, all programs opened, all keystrokes. Takes screenshot images at specified times. WinGuardian 2.0 is a windows monitoring and filtering utility keeps an eye on computer usage in the office, at school or in the home.

Spyware Description:

Characteristics/Symptoms:

-> It logs keystrokes of the PC in the background. -> It also takes screenshots, logs keystrokes, allows remote connections, and runs invisibly in the background. -> It logs websites visited by the user, and tracks all programs opened.

Additional information might be found here:

	Search at Google for Winguardian
	Search at Bing for Winguardian
	Search at Yahoo for Winguardian

Processes Running:

sysctrl.exe

File information Created after Installation:

File Location	Size (Bytes)	Type
C:\WINDOWS\system\keyhook.dll	37888	Application Extension

Folder information Created after Installation:

Folder Location

Registry information Created after Installation:

Main Registry Key	Sub Registry Key	Key Value Name