Showing results for 
Show  only  | Search instead for 
Did you mean: 
Former Member
Not applicable
Report Inappropriate Content
Message 1 of 2


What's the meaning of

" containing the directory "        

" Intended to contain directory  "


I am giving link


And how can it saves keylog and screenshot to

Appdata/local/temp folder ????

1 Reply
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 2

Re: Keyloggers

Hi Souradip,


It appears that the "C:\Windows\Temp\TMP0389A.tmp" file is a plain text file which contains the path to the following:




As the article describes, the malware uses a combination of Windows APIs and code similar to what is found in some "open-source screengrabbing code," which appears to be primarily used for "benign screen-sharing package."


We have detection for these files as follows:

26466867557f84dd4784845280da1f27 -  PS/Agent.x

d45931632ed9e11476325189ccb6b530 -  RDN/Generic PWS.y

34404a3fb9804977c6ab86cb991fb130 - RDN/Generic.grp


I hope this helps!


Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community