Name :	Monitoring-Tool:W32/Ardamax
Detection Names :	Monitoring-Tool:W32/Ardamax Monitor.Win32.Ardamax
Aliases :	MonitoringTool:Win32/Ardamax (Microsoft)
Category:	Virus
Type:	Monitoring-Tool
Platform:	W32

A program that monitors and records all actions on a computer, including keystrokes entered.

Ardamax is a commercial keylogger program that can be installed onto the system from the product's website.  When run, the program can capture a range of user activities, such as keystrokes typed, instant messenger chat logs, web browser activity and even screenshots of the active desktop.

This program can be configured to a complete stealth mode, with password protection, to avoid user detection.

The information gathered is stored in an encrypted log file, which is only viewable using the built-in Log Viewer. The log file can be sent to an external party through e-mail, via a local area network (LAN) or by upload to an FTP server (in either HTML or encrypted format).

Installation

During installation, the user is presented with a typical end user license agreement (EULA) as shown below:



If the user clicks the "I Agree" button, the program is installed. Ardamax is by default installed at:


Activity

Upon successful installation, the program will be launched and placed on the System Tray area:



More screenshots are available from the product website.