Virtual Screen Spy

Virtual Screen Spy is a keylogger that takes images, screenshots of your screen. It is screen capture software.

General information:

Malware Name: Virtual Screen Spy
Malware Type: Keylogger
Company Name: Virtual Software Ltd
Company URL: http://virtualsoftwareltd.com/
Threat Level: Moderate
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation

Company Description:

Virtual Software Ltd provides you the software Virtual Screen Spy that is a Screen Capture Software. Similar to a surveillance camera, Virtual Screen Spy will be taking images / Screenshots, only these images / Screenshots will be of your screen.

Spyware Description:

Virtual Screen Spy is a keylogger that takes images, screenshots of your screen. It is screen capture software.

Characteristics/Symptoms:

    -> It takes images, screenshots of your screen. -> It is screen capture software.

Additional information might be found here:

google Search at Google for Virtual Screen Spy
bing Search at Bing for Virtual Screen Spy
yahoo Search at Yahoo for Virtual Screen Spy

Processes Running:

VL.CopDad.exe

File information Created after Installation:

File Location Size (Bytes) Type
C:\Program Files\VirtualLTD\CopDad\1.2\Common\VL.CopDad.Server.dll 20480 Application Extension
C:\Program Files\VirtualLTD\CopDad\1.2\Common\VL.UtilityLibrary.dll 98304 Application Extension
C:\Program Files\VirtualLTD\CopDad\1.2\Common\VL.dll 45056 Application Extension

Folder information Created after Installation:

Folder Location
C:\Program Files\VirtualLT
C:\Program Files\VirtualLTD\CopDad\1.2\ScreenSpy\fr-F

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{61C9D4F3-DDDC-4C13-A3F6-F77225A6C396} InstallSource
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{61C9D4F3-DDDC-4C13-A3F6-F77225A6C396} ModifyPath
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{61C9D4F3-DDDC-4C13-A3F6-F77225A6C396} Publisher