Trinculo
02-12-2005, 22:03
Encountered a keylogger program:
The program is GwD.zip
Upon extracting the package a keylogger program called rinst.exe is placed in the user's temp folder.
The program transmits back to the website the uid/pw of the gw account used for this transaction.
The instructions:
Start GW
Click upon storage
Click Deposit with amount
Start GwD.exe
Return to GW and close program.
Restart GW
Upon return to Storage please note deposit amount previously attempted has now doubled.
The program is GwD.zip
Upon extracting the package a keylogger program called rinst.exe is placed in the user's temp folder.
The program transmits back to the website the uid/pw of the gw account used for this transaction.
The instructions:
Start GW
Click upon storage
Click Deposit with amount
Start GwD.exe
Return to GW and close program.
Restart GW
Upon return to Storage please note deposit amount previously attempted has now doubled.