ThreatExpert's Statistics for not-a-virus:Monitor.Win32.KeyLog.32 [Kaspersky Lab]:

not-a-virus:Monitor.Win32.KeyLog.32 [Kaspersky Lab] is also known as:

Threat Alias	Number of Incidents
Application.Pal_Computer_Surveillance_System_3.2 [PC Tools]	7
not-a-virus:Monitor.Win32.KeyLog [Ikarus]	7
Spyware.ComSurveilSys [Symantec]	7
Application.PAL_Keylogger_Pro [PC Tools]	6
Generic PUP.a [McAfee]	4
Generic PUP.e [McAfee]	4
Generic PUP.g [McAfee]	4
MonitoringTool:Win32/Csysserv [Microsoft]	2
not-a-virus:Monitor.Win32.KeyLog.b [Kaspersky Lab]	1
not-a-virus:Monitor.Win32.KeyLog.k [Kaspersky Lab]	1

not-a-virus:Monitor.Win32.KeyLog.32 [Kaspersky Lab] has the following possible countries of origin:

Origin		Number of Incidents
	Russian Federation	1
	Ukraine	1

not-a-virus:Monitor.Win32.KeyLog.32 [Kaspersky Lab] is known to be created as:

%System%\pal\css\explorer.exe

%System%\pal\css\thehook.dll

%System%\pal\css\thehookxp.dll

%System%\pal\pcs\explorer.exe

%System%\pal\pcs\thehook.dll

%System%\pal\pcs\thehookxp.dll

Note: %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).