Threat Database Potentially Unwanted Programs PUP.LightLogger Keylogger for Parents

PUP.LightLogger Keylogger for Parents

Published:
Last updated:

Threat Scorecard

Popularity Rank: 4,284
Threat Level: 10 % (Normal)
Infected Computers: 1,933
First Seen: August 22, 2020
Last Seen: October 4, 2026
OS(es) Affected: Windows

The detection of PUP.LightLogger Keylogger for Parents on your system indicates the presence of a potentially unwanted program (PUP) that may be compromising your privacy and security. This type of software is often installed without the user's knowledge or consent, and can pose a significant threat to the confidentiality and integrity of your personal data.

What Is PUP.LightLogger Keylogger for Parents?

PUP.LightLogger Keylogger for Parents is a type of potentially unwanted program that is designed to monitor and record user activity on a computer. While it may be marketed as a tool for parents to monitor their children's online activities, it can also be used for malicious purposes, such as stealing sensitive information or spying on unsuspecting users. This type of software can be particularly problematic, as it can be difficult to detect and remove, and can cause significant harm to the affected system and its users.

How PUP.LightLogger Keylogger for Parents Operates

PUP.LightLogger Keylogger for Parents operates by installing itself on a computer and then monitoring and recording user activity, such as keystrokes, browsing history, and other online activities. This information can then be transmitted to a remote server, where it can be used for malicious purposes. The software may also be able to evade detection by traditional antivirus programs, making it difficult to remove without specialized tools and expertise.

Symptoms of Infection

Systems infected with PUP.LightLogger Keylogger for Parents may exhibit a range of symptoms, including slow performance, frequent crashes, and unusual network activity. Users may also notice that their browser settings have been changed, or that they are being redirected to unfamiliar websites. In some cases, the software may also cause pop-ups, ads, or other unwanted content to appear on the affected system.

  • Unexplained changes to browser settings or homepage
  • Appearance of unwanted pop-ups or ads
  • Slow system performance or frequent crashes
  • Unusual network activity or unfamiliar connections

How to Remove PUP.LightLogger Keylogger for Parents

  1. Boot your system in Safe Mode with Networking to prevent the malware from loading and to allow for easier removal
  2. Perform a full scan of your system using a reputable anti-malware tool, such as SpyHunter, to detect and remove any malicious software
  3. Uninstall any suspicious programs or applications that may be related to the PUP
  4. Reset your browser settings to their default values, including Chrome, Firefox, and Edge, to remove any malicious extensions or add-ons
  5. Reboot your system and perform a follow-up scan to ensure that the malware has been completely removed

Conclusion

The removal of PUP.LightLogger Keylogger for Parents requires careful attention to detail and a thorough understanding of the software's operating characteristics. By following the steps outlined above and using reputable anti-malware tools, users can help to protect their systems and personal data from the threats posed by this type of potentially unwanted program. It is essential to remain vigilant and proactive in maintaining the security and integrity of your computer, and to take immediate action if you suspect that your system has been compromised by malware or other types of malicious software.

SpyHunter Detects & Remove PUP.LightLogger Keylogger for Parents

File System Details

PUP.LightLogger Keylogger for Parents may create the following file(s):
# File Name MD5 Detections
1. lmonitor.exe 32afc09e040ebe58bf3591aefeaee98d 935
2. lightlog.exe 8c595675a085d143207b92daacf4e226 405
3. f_00018d c705383852dc4da7f4e4175ecc87789a 12
4. 2334445ee2b6b53b1be2908b97d8a9a9555302661ffefd26cbefbe759fdea87b.exe f28f3f995dc8b31fb7ccb67d10c26623 6
5. ladmin.exe 0f3462f2e1670366a29f4c8e4b19d430 6
More files

Analysis Report

General information

Family Name: PUP.LightLogger Keylogger for Parents
Signature status: No Signature

Known Samples

MD5: 07c909ba64c3cc8655c20b602fb08063
SHA1: 44850bd5b6ff299e91d88837e0399cdec525345d
SHA256: A8A753E172120DD02F9B6EF08189053046C52F264F4C94A99110377D7EC4DE77
File Size: 2.12 MB, 2117632 bytes

Windows Portable Executable Attributes

  • File doesn't have "Rich" header
  • File doesn't have exports table
  • File doesn't have relocations information
  • File doesn't have security information
  • File is 64-bit executable
  • File is either console or GUI application
  • File is GUI application (IMAGE_SUBSYSTEM_WINDOWS_GUI)
  • File is Native application (NOT .NET application)
  • File is not packed
  • IMAGE_FILE_DLL is not set inside PE header (Executable)
Show More
  • IMAGE_FILE_EXECUTABLE_IMAGE is set inside PE header (Executable Image)

Windows PE Version Information

Name Value
Company Name HeavenWard
File Description LightLogger Monitor
File Version 6,20,5,1
Internal Name lmonitor
Legal Copyright (C) 2020, HeavenWard
Original Filename lmonitor.exe
Product Name LightLogger
Product Version 6,20,5,1

File Traits

  • x64

Block Information

Total Blocks: 10,222
Potentially Malicious Blocks: 13
Whitelisted Blocks: 8,769
Unknown Blocks: 1,440

Visual Map

0 ? 0 0 0 0 0 0 0 0 ? 0 ? ? 0 ? 0 0 ? 0 ? ? ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 ? 0 ? 0 0 0 0 0 0 0 0 0 ? 0 0 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 ? 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? ? 0 0 0 ? 0 0 ? ? 0 0 ? 0 0 ? ? 0 ? 0 ? 0 ? 0 ? 0 0 ? 0 0 ? 0 0 ? 0 0 ? 0 0 0 ? 0 0 0 0 0 ? 0 0 0 0 ? ? 0 0 ? 0 0 0 0 ? ? 0 0 0 ? ? 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 0 0 ? 0 0 ? ? 0 0 0 0 0 0 0 ? 0 0 0 0 ? 0 0 0 ? ? 0 ? 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 ? 0 0 0 ? 0 0 0 ? 0 0 0 ? 0 0 0 ? 0 0 0 ? 0 0 0 ? 0 0 0 ? 0 0 0 ? 0 0 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 ? 0 0 0 0 0 ? ? 0 ? 0 ? ? 0 0 0 ? 0 0 0 0 0 0 0 ? 0 0 0 0 ? 0 0 0 0 0 ? 0 0 0 0 0 ? 0 0 0 0 0 ? 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 ? ? 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 ? ? ? 0 0 0 ? 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 ? 0 ? 0 ? 0 0 ? 0 0 0 0 ? 0 ? 0 0 ? 0 0 0 0 0 0 0 0 ? 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 ? 0 ? x ? 0 0 ? 0 0 0 0 0 ? ? 0 0 x 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? ? 0 0 0 0 0 0 0 0 0 ? 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 x ? 0 0 0 ? ? 0 0 0 0 0 0 0 0 0 ? 0 ? 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 ? ? 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 0 0 0 ? 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 ? 0 0 0 0 ? 0 ? 0 0 0 0 0 0 0 0 0 ? ? 0 0 0 0 x 0 0 0 0 0 0 0 0 0 ? 0 0 ? 0 0 0 ? 0 0 0 ? 0 0 ? 0 ? 0 0 0 0 0 ? 0 0 0 0 0 ? 0 0 0 0 0 ? 0 0 0 0 ? 0 0 0 ? ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 ? 0 0 0 0 0 x ? 0 0 0 0 0 0 ? 0 0 0 0 0 ? ? ? 0 0 0 0 x 0 0 0 0 0 0 0 0 0 x 0 ? 0 0 ? ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x 0 ? ? 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 ? 0 0 0 0 0 0 ? 0 0 ? 0 0 ? 0 0 0 0 ? ? 0 0 0 0 0 0 0 ? 0 ? 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 0 ? 0 0 0 0 0 0 ? 0 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 ? ? ? ? 0 ? 0 0 ? 0 ? ? ? ? 0 0 ? 0 0 ? 0 0 ? 0 ? ? 0 0 0 0 0 0 0 0 0 ? 0 0 0 0 0 0 ? 0 0 0 0 0 0 0 ? 0 0 0 0 0 ? ? ? ? 0 ? 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? ? 0 0 0 0 0 ? 0 ? 0 ? 0 0 ? ? 0 ? 0 ? ? ? 0 0 ? ? ? 0 0 ? ? 0 0 ? 0 ? 0 0 ? 0 0 0 0 0 0 0 0 0 ? 0 ? 0 0 0 0 ? 0 0 0 ? 0 ? 0 0 0 ? ? 0 0 0 0 0 0 0 0 ? ? 0 0 ? ? ? 0 0 ? 0 0 0 0 0 ? 0 0 ? 0 0 ? 0 0 0 0 0 0 0 0 ? 0 0 0 ? 0 ? 0 0 x ? ? ? 0 ? 0 0 0 ? 0 ? 0 x 0 0 ? ? 0 0 0 ? 0 0 ? ? ? ? 0 ? ? 0 ? ? 0 0 0 0 x 1 0 0 ? ? 0 0 ? 0 0 ? ? ? 0 ? ? ? ? ? 0 0 0 ? 0 0 0 ? 0 ? ? 0 1 ? 0 0 ? 0 0 0 0 0 ? 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 ? 0 0 ? 0 0 ? 0 ? ? 0 ? 0 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 ? 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 ? 0 0 0 0 0 0 0 0 ? 0 ? 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 ? 0 ? 0 0 ? 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 0 0 ? 0 0 ? 0 0 0 ? 0 ? 0 ? 0 ? 0 0 ? 0 ? 0 ? 0 ? 0 ? 0 0 ? ? 0 0 ? 0 0 0 ? 0 0 0 0 0 0 ? 0 ? 0 0 ? 0 0 ? 0 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 0 0 ? ? 0 0 0 0 0 0 0 0 ? 0 0 0 0 0 ? 0 ? 0 ? 0 0 0 0 ? 0 ? 0 ? 0 0 0 0 ? ? ? 0 0 0 0 0 0 ? 0 ? ? 0 0 ? 0 0 0 ? 0 0 ? 0 0 0 0 0 ? 0 0 0 ? 0 0 0 ? 0 0 0 ? 0 0 0 0 0 0 0 0 0 1 0 0 ? 0 0 0 0 0 0 ? 0 0 0 0 0 ? 0 0 0 0 ? 0 0 0 1 ? ? 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? ? 0 0 ? ? ? 0 ? ? 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 ? ? 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 ? 0 ? ? ? 0 ? 0 ? 0 ? 0 0 0 ? 0 ? 0 0 ? 0 0 0 0 0 0 ? 0 0 0 0 ? 0 0 0 ? 0 0 0 0 ? 0 0 ? ? 0 0 0 ? 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 ? 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 ? 0 ? 0 ? 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 ? ? 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 ? 0 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 ? ? ? ? ? ? 0 ? 0 ? 0 0 ? 0 0 0 0 0 0 0 0 0 0 ? 0 ? 0 ? 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 0 0 ? 0 0 0 0 ? 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 0 0 ? 0 0 0 0 ? 0 0 0 0 ? ? 0 0 0 0 0 0 0 0 0 0 ? ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 ? 0 ? 0 0 ? 0 ? 0 0
... Data truncated
0 - Probable Safe Block
? - Unknown Block
x - Potentially Malicious Block

Files Modified

File Attributes
c:\programdata\heavenward\lightlogger\logs\44850bd5b6ff299e91d88837e0399cdec525345d_0002117632.log Generic Write,Read Attributes

Windows API Usage

Category API
Syscall Use
  • ntdll.dll!NtAlpcConnectPortEx
  • ntdll.dll!NtAlpcQueryInformation
  • ntdll.dll!NtAlpcSendWaitReceivePort
  • ntdll.dll!NtApphelpCacheControl
  • ntdll.dll!NtAssociateWaitCompletionPacket
  • ntdll.dll!NtClose
  • ntdll.dll!NtCreateEvent
  • ntdll.dll!NtCreateFile
  • ntdll.dll!NtCreateIoCompletion
  • ntdll.dll!NtCreateSection
Show More
  • ntdll.dll!NtCreateSemaphore
  • ntdll.dll!NtCreateTimer2
  • ntdll.dll!NtCreateWaitCompletionPacket
  • ntdll.dll!NtCreateWorkerFactory
  • ntdll.dll!NtDuplicateObject
  • ntdll.dll!NtFreeVirtualMemory
  • ntdll.dll!NtMapViewOfSection
  • ntdll.dll!NtOpenDirectoryObject
  • ntdll.dll!NtOpenFile
  • ntdll.dll!NtOpenKey
  • ntdll.dll!NtOpenKeyEx
  • ntdll.dll!NtOpenProcessToken
  • ntdll.dll!NtOpenSection
  • ntdll.dll!NtOpenThreadToken
  • ntdll.dll!NtProtectVirtualMemory
  • ntdll.dll!NtQueryAttributesFile
  • ntdll.dll!NtQueryInformationFile
  • ntdll.dll!NtQueryInformationProcess
  • ntdll.dll!NtQueryInformationThread
  • ntdll.dll!NtQueryInformationToken
  • ntdll.dll!NtQueryKey
  • ntdll.dll!NtQueryPerformanceCounter
  • ntdll.dll!NtQuerySecurityAttributesToken
  • ntdll.dll!NtQuerySecurityObject
  • ntdll.dll!NtQuerySystemInformation
  • ntdll.dll!NtQuerySystemInformationEx
  • ntdll.dll!NtQueryValueKey
  • ntdll.dll!NtQueryVirtualMemory
  • ntdll.dll!NtQueryWnfStateData
  • ntdll.dll!NtReadFile
  • ntdll.dll!NtReleaseWorkerFactoryWorker
  • ntdll.dll!NtSetEvent
  • ntdll.dll!NtSetInformationFile
  • ntdll.dll!NtSetInformationProcess
  • ntdll.dll!NtSetInformationThread
  • ntdll.dll!NtSetInformationVirtualMemory
  • ntdll.dll!NtSetInformationWorkerFactory
  • ntdll.dll!NtSetTimer2
  • ntdll.dll!NtTerminateProcess
  • ntdll.dll!NtTestAlert
  • ntdll.dll!NtTraceControl
  • ntdll.dll!NtUnmapViewOfSectionEx
  • ntdll.dll!NtWaitForSingleObject
  • ntdll.dll!NtWaitForWorkViaWorkerFactory
  • ntdll.dll!NtWriteFile
  • ntdll.dll!NtWriteVirtualMemory
  • win32u.dll!NtUserGetClassInfoEx
  • win32u.dll!NtUserGetKeyboardLayout
  • win32u.dll!NtUserGetThreadState
  • win32u.dll!NtUserKillTimer
  • win32u.dll!NtUserPostMessage
  • win32u.dll!NtUserSetTimer
  • win32u.dll!NtUserUnregisterClass
User Data Access
  • GetComputerNameEx
  • GetUserName