Know Your Malware - Kwoo Trojan Removal

Kwoo is a trojan that records user keystrokes and sends gathered data to a predetermined remote web server. It also silently downloads from this server, installs and runs unsolicited software without asking for user permission. Kwoo may change the Internet Explorer default home page and Windows wallpaper. The parasite automatically runs as a service on every system startup.

Related files: msuls.exe, msusc.exe

Kwoo properties:
Logs keystrokes
Changes browser settings
Connects itself to the internet
Hides from the user
Stays resident in background Remove Kwoo, removal instructions

Linked by shanmuga Thursday, 27th October 2005 11:13AM