Spyware.SpySure

Spyware.SpySure is a spyware that logs all keystrokes recorded and also takes screen snapshots at regular intervals. It monitors every website and sees every website visited.

General information:

Malware Name: Spyware.SpySure
Malware Type: Spyware
Company Name: Spysure.com
Company URL: http://www.spysure.com/
Threat Level: Medium Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation

Company Description:

Spysure.com provides you the software Spyware.SpySure that monitors every website and see every website visited. It also reads every email sent or received. It logs all keystrokes recorded. Secret passwords revealed. This program works secretly in the background. Screen snapshots taken automatically at regular intervals. It also restricts access only to sites you have approved.

Spyware Description:

Spyware.SpySure is a spyware that logs all keystrokes recorded and also takes screen snapshots at regular intervals. It monitors every website and sees every website visited.

Characteristics/Symptoms:

    -> It logs all keystrokes recorded and also takes screen snapshots at regular intervals. -> It monitors every website and sees every website visited.

Additional information might be found here:

google Search at Google for Spyware.SpySure
bing Search at Bing for Spyware.SpySure
yahoo Search at Yahoo for Spyware.SpySure

Processes Running:

servirsess.exe

File information Created after Installation:

File Location Size (Bytes) Type
C:\Documents and Settings\[USER]\Application Data\spysure\ashprot.sys 21376 System file
C:\Documents and Settings\[USER]\Application Data\spysure\ashsetup.dat 12812 DAT File
C:\Documents and Settings\[USER]\Application Data\spysure\spysure.zip 1243911 WinZip File

Folder information Created after Installation:

Folder Location
C:\Documents and Settings\[USER]\Application Data\spysure\screenzi
C:\Documents and Settings\[USER]\Application Data\spysure\tempdi

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE \SYSTEM\ControlSet001\Services\DrvFltIp\Security Security
HKEY_LOCAL_MACHINE \SYSTEM\ControlSet001\Services\spyservice
HKEY_LOCAL_MACHINE \SYSTEM\ControlSet002\Services\ashprot DisplayName