From the doc: 'The setup file ask for ur emailid,smtp server ,after installation it is higly invisibile,uses the spool32.exe ,the same system file name but it is on the windows folder,and it will log the keystrokes and after exceeds the log file linit (5kb) it send that log file+pop3 account details+cashed password to ur email id.' AKA PWS-PKsob.
TrojanSpy.Win32.Faisal.b
Windowswinfile32.dllWindowswinfile64.dllWindowswinfileb32.dll