ScreenSpy
Screen spy works like a VCR, records everything you do on your PC.This type of spyware is Internet Snapshot Recording tool works like a surveillance camera aimed directly at your PC screen. It records a screenshot every 30 seconds and remains completely
hidden from view in stealth. It captures all activity you performed on your Pc.0
General information:
| Malware Name: |
ScreenSpy |
| Malware Type: |
Key Logger |
| Company Name: |
Screen-Spy |
| Company URL: |
http://screen-spy.com/
|
| Threat Level: |
Elevated Risk |
| Operating System: |
WIN XP |
| Installation Type: |
Installed through EXE |
| Operation: |
Time of After Installation. |
Company Description:
Screen-Spy makes it easy to see what is happening on PC in our absence. After we install it on PC, Screen-Spy will begin SECRETLYÂ recording screenshots (pictures) of computer's screen. Taking screenshots allows seeing activity such
as emails, chat conversations, web sites, programs and more! You determine how often a screenshot will be taken. The screenshots are then viewed in the interface, which only we will know how to access. We can playback the activity just like a movie! Simply
press play and watch the activity as it happened.
Spyware Description:
Screen spy works like a VCR, records everything you do on your PC.This type of spyware is Internet Snapshot Recording tool works like a surveillance camera aimed directly at your PC screen. It records a screenshot every 30 seconds and remains completely
hidden from view in stealth. It captures all activity you performed on your Pc.0
Characteristics/Symptoms:
-> Monitor and capture data from computers -> Run in stealth mode -> Intercepts keystrokes from the keyboard and records them in a log -> Starts with the operating system0
Additional information might be found here:
Processes Running:
win16dll.exe
File information Created after Installation:
| File Location |
Size (Bytes) |
Type |
| C:\Documents and Settings\All Users\Start Menu\Programs\Screen Spy\Screen Spy.lnk |
663 |
Shortcut |
| C:\WINDOWS\system32\ScreenRX\unins000.dat |
1311 |
DAT File |
| C:\WINDOWS\system32\ScreenRX\unins000.exe |
71588 |
Application |
Folder information Created after Installation:
| Folder Location |
| C:\WINDOWS\system32\ScreenRX |
Registry information Created after Installation:
| Main Registry Key |
Sub Registry Key |
Key Value Name |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Screen Spy Trial_is1 |
URLInfoAbout |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Screen Spy Trial_is1 |
URLUpdateInfo |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Screen Spy Trial_is1 |
UninstallString |
