We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
MonitoringTool:Win32/Beyond
Aliases: not-a-virus:Monitor.Win32.BeyondKeyLogger.ir (Kaspersky) Potentially harmful program Logger.AIJH (AVG) Trojan.Spy.KeyLogger!4D4E (Rising AV)
Summary
Monitoringtool:Win32/Beyond is a tool that logs keystrokes. It may be known by its more common name, "Beyond Keylogger".
It can log all keystrokes typed into your computer, regardless of locale, which means it can also capture language-specific characters. It can also record voice and instant messenger conversations, clipboard information, microphone sounds, screenshots of your desktop, and visited websites.
It automatically activate itself when Windows starts and does not display any notification on your computer.
Monitoringtool:Win32/Beyond may create an uninstaller that can be accessed from the Control Panel:
- For Windows 8, swipe in from the right and go to Start, type Uninstall and then go to Settings. In the search results, select Uninstall a program.
- For Windows 7 and Vista, open the Start menu and navigate to Control Panel>Programs>Uninstall a Program
- For XP, open the Start menu and navigate to Control Panel>Add or Remove Programs
The entry name may be called "Beyond-Key-logger".
If you can't find this entry, or you cannot remove it using the uninstaller, then you can run a full-system scan using an appropriate, up-to-date, security solution. The following Microsoft products detect Monitoringtool:Win32/Beyond:
- Microsoft Security Essentials or, for Windows 8, Windows Defender
- Microsoft Safety Scanner