WinSession Logger

It is a Commercial Key Logger is a program that captures and logs keystrokes as they are entered on the computer for the purpose of monitoring the user. The logged data, which may be encrypted, is saved or sent to the person who installed the key logger. These applications often run in stealth mode and are invisible to the user that is being monitored. Such key loggers are sold commercially and may be used legitimately if deployed by authorized administrators and disclosed to the persons being monitored, as in a business environment. The use of a key logger to monitor persons without their knowledge has been ruled illegal in at least one jurisdiction.0

General information:

Malware Name: WinSession Logger
Malware Type: Key Logger
Company Name: Cromosoft.com
Company URL: http://www.cromosoft.com/
Threat Level: Severe Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation.

Company Description:

Cromosoft.com provides various keyloggers like Remote Keylogger, Local Keylogger, Keystroke Recorder and WinSession Logger. WinSession Logger (WSL) is a recommended spy software program. WSL gives the ability to record every action on our computer and not only keystrokes pressed. WSL is a high valuable product in the keyloggers by software and computer monitoring market used by home owners and professionals in several countries from America to Asia. Is the most intuitive spy software, easy to setup and let us to save our time opening our logs, we will not find any difference between the screenshots saved by WSL and our current screen.

Spyware Description:

It is a Commercial Key Logger is a program that captures and logs keystrokes as they are entered on the computer for the purpose of monitoring the user. The logged data, which may be encrypted, is saved or sent to the person who installed the key logger. These applications often run in stealth mode and are invisible to the user that is being monitored. Such key loggers are sold commercially and may be used legitimately if deployed by authorized administrators and disclosed to the persons being monitored, as in a business environment. The use of a key logger to monitor persons without their knowledge has been ruled illegal in at least one jurisdiction.0

Characteristics/Symptoms:

    -> Monitor and capture data from computers -> Run in stealth mode -> Intercepts keystrokes from the keyboard and records them in a log -> Starts with the operating system0

Additional information might be found here:

google Search at Google for WinSession Logger
bing Search at Bing for WinSession Logger
yahoo Search at Yahoo for WinSession Logger

Processes Running:

wslogger.exe

File information Created after Installation:

File Location Size (Bytes) Type
C:\Documents and Settings\sapna\Desktop\WS Logger.lnk 515 Shortcut
C:\Program Files\Wlogs\cu.ini 10697 Configuration Settings
C:\Program Files\Wlogs\readme.txt 4558 Text Document

Folder information Created after Installation:

Folder Location
C:\Program Files\Wlogs

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinSession Logger 3.2_is1 URLInfoAbout
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinSession Logger 3.2_is1 URLUpdateInfo
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinSession Logger 3.2_is1 UninstallString