From the doc: 'GWGhost is a PassWord Stealer. The main purpose is to grab all the masked passwords appeared on the screen. GWGhost will automatically detect which window contains masked passwords, and then take a snapshot of all text information in that window. The information will be sent to your mail-box at intervals. From v2.0 and on, GWGhost can also log key strokes of applications. You can setup GWGhost about which applications will be logged. Many products, for example, Glacier, scan all windows repeatly for passwords and slow down the system. Other product, alternatively, scan periodically but just lose some important information when the password stays not long enough on the screen. GWGhost use another technique to solve these problems. It sets MouseHook and KeyboardHook to the whole system so that it can determine when to carry out a scan. And it only scan one application each time. GWGhost is fast and silent! Another advantage is that you will never be disturbed by network firewalls, even they can impose per-application restrictions. That's because GWGhost inject itself into other applications and do not perform the mail sending routines by itself.'
Backdoor.GWGirl.20Backdoor.GWGirl.25.bBackdoor.GWGirl.27Backdoor.GWGirl.272Trojan.Spy.GWGhost.30Trojan.Spy.GWGhost.aTrojan.Spy.GWGhost.bTrojan.Win32.GwGhost.20TrojanDropper.Win32.GwBinder.30.aTrojanSpy.Win32.GWGhost.b
gwghost.exeserver.exeserver2.72.exesetghost.exetrojanspy.win32.gwghost.b.exetrojanspy.win32.gwghost.c.exetrojanspy.win32.gwghost.d.exetrojanspy.win32.gwghost.e.exetrojanspy.win32.gwghost.f.exe
dxinput.dll