Name: FKWP 1.5 Category: Commercial Key Logger Advice: Remove Risk: Elevated Risk Elevated threats are usually threats that fall into the range of adware in which data about a user's habits are tracked and sent back to a server for analysis without your consent or knowledge. Description: It is a Firewall bypassing Key logger, Web downloader and Protected Storage password sender. Features: logging all keystrokes, Download 2 urls cab files and extracting and executing the inside exes (Firewall bypass), Protected storage (Outlook, IE stored passes), Cashed Dialup passes Sender, keystrokes, passes will mail to the email id, daily or the log size is over, firewall bypassing by injecting code into IE and sending mail, No Process visible, injects into Explorer.exe on startup and exiting, Active Setup Startup, encrypted log file. Signatures: process: fkwp1.5.exe: MD5 Hash: 08cf75b1dfba4bfcaf0... process: msvchost.exe: MD5 Hash: 08cf75b1dfba4bfcaf0... process: editorfkwp1.5.exe: MD5 Hash: ... process: editor~2.exe: MD5 Hash: ... process: editorfkwp1.5.exe: MD5 Hash: .. Type: Commercial Key Logger - A commercial key logger is a program that is installed by the user of a computer to explicitly monitor the activity of other users. These types of program can be installed using stealth tactics to hide themselves from other users. In addition these programs can be purchased from commercial organizations for this use.