Summary

A fake Lycos screensaver was distributed in e-mails on December 6th, 2004. The executable file attached to those e-mails was supposed to be the famous Lycos' 'Make Love Not Spam' screensaver that was attacking sites advertised by spammers (this project is now closed). Instead the file attached to those e-mails was a self-extracting RAR archive designed to drop a Perfect Keylogger components to a hard drive.

Additional Details

Perfect Keylogger is an application to monitor what keys a user presses and to save this data to a file. The primary objective of such tools is to spy against users of affected computers.

Detection

Detection for this malware was published on December 6th, 2004 in the following F-Secure Anti-Virus updates:

[FSAV_Database_Version]
Version=2004-12-06_03



Write-up: Alexey Podrezov, December 8th, 2004;