WinSpy Stealth Monitor
WinSpy Stealth Monitor is a spyware with high risk that logs keystrokes, Web sites visited, programs used, and file and folder opened or used. It also can be used to monitor locally as well as remotely. WinSpy Stealth Monitor is a spyware with high
risk that logs keystrokes, Web sites visited, programs used, and file and folder opened or used. It also can be used to monitor locally as well as remotely.0
General information:
| Malware Name: |
WinSpy Stealth Monitor |
| Malware Type: |
Spyware |
| Company Name: |
BC Computing |
| Company URL: |
http://www.win-spy.com/
|
| Threat Level: |
High Risk |
| Operating System: |
WIN XP |
| Installation Type: |
Installed through EXE |
| Operation: |
Time of After Installation |
Company Description:
BC Computing provides you the software WinSpy Stealth Monitor that is a keylogger which logs keystrokes, Web sites visited, programs used, and file and folder opened or used. It runs without being detected and takes snapshots of the screen. It can
be used to monitor locally as well as remotely. We recommend that you should remove this immediately unless you have installed it for a purpose.
Spyware Description:
WinSpy Stealth Monitor is a spyware with high risk that logs keystrokes, Web sites visited, programs used, and file and folder opened or used. It also can be used to monitor locally as well as remotely. WinSpy Stealth Monitor is a spyware with high
risk that logs keystrokes, Web sites visited, programs used, and file and folder opened or used. It also can be used to monitor locally as well as remotely.0
Characteristics/Symptoms:
-> It logs keystrokes, Web sites visited, programs used, and file and folder opened or used. -> It can be used to monitor locally as well as remotely.
Additional information might be found here:
Processes Running:
services.exe
File information Created after Installation:
| File Location |
Size (Bytes) |
Type |
| C:\WINDOWS\system32\OS32check\rsver.dll |
unknown |
|
| C:\WINDOWS\system32\OS32check\services.exe |
unknown |
|
| C:\WINDOWS\system32\OS32check\setup1.exe |
unknown |
|
Folder information Created after Installation:
| Folder Location |
| C:\Program Files\Accessories\Temp249\WC |
| C:\WINDOWS\system32\OS32check |
Registry information Created after Installation:
| Main Registry Key |
Sub Registry Key |
Key Value Name |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Office2000\KA |
Sex0 |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Office2000\KA |
parents are gone0 |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Office2000\US |
0 |
