Ardamax new variant

Discussion in 'malware problems & news' started by FanJ, Feb 24, 2009.

Thread Status:
Not open for further replies.
  1. FanJ

    FanJ Updates Team

    Joined:
    Feb 9, 2002
    Posts:
    4,659
    There seems to be a new variant of the Ardamax keylogger.
    Please AV/AT/AS vendors take a look at it.

    At the moment I have too much eye problems to get further involved in this.
    Please, can someone else take it over from me?
     
    FanJ, Feb 24, 2009
    #1
  2. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    164,112
    Location:
    Texas
    Definition on this program from Sunbelt.
     
    ronjor, Feb 24, 2009
    #2
  3. FanJ

    FanJ Updates Team

    Joined:
    Feb 9, 2002
    Posts:
    4,659

    Thanks Ron !

    Nice write-up from Sunbelt.
    I have seen more file traces, but that could be due to that Sunbelt lists there only .exe and .dll files.

    What about GEM.exe ?
    What about GEM.00x where x is a number?
    And I don't see GEM mentioned.

    Is this description for VIPRE or Counterspy?

    Inspector (Mike)? ;)
     
    FanJ, Feb 24, 2009
    #3
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...