XT Spy

XT Spy is a comertial monitoring software that stealthily records all keystrokes and also takes screenshots from the user's system.0

General information:

Malware Name: XT Spy
Malware Type: Key Logger
Company Name: XT Spy
Company URL: http://xtspy.com/
Threat Level: Elevated Risk
Operating System: WIN XP
Installation Type: Installation through EXE
Operation: Time of After Installation

Company Description:

XT Spy provides us the equivalent of a digital surveillance system which enables us to see everything our family members or employees are doing. It records all the data logs by simply clicking on the XT Spy program icon and by entering the password. It also has the option to view the logs remotely from any computer, with the popular RemoteViewing feature. Moreover it is easy to use and runs completely hidden from the user.

Spyware Description:

XT Spy is a comertial monitoring software that stealthily records all keystrokes and also takes screenshots from the user's system.0

Characteristics/Symptoms:

    -> Monitor and capture data from computers -> Run in stealth mode -> Intercepts keystrokes from the keyboard and records them in a log -> Starts with the operating system0

Additional information might be found here:

google Search at Google for XT Spy
bing Search at Bing for XT Spy
yahoo Search at Yahoo for XT Spy

Processes Running:

XTS Run.exe

File information Created after Installation:

File Location Size (Bytes) Type
C:\Documents and Settings\[USER]\Desktop\XTS Run.lnk 540 Shortcut
C:\Documents and Settings\[USER]\Start Menu\Programs\XTS\XTS Run.lnk 552 Shortcut
C:\xfigsys\xfigsys.gyq 182 GYQ File

Folder information Created after Installation:

Folder Location
C:\Program Files\XTS
C:\xfigsys

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindowsCurrentVersionUninstallIMG2 Publisher
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindowsCurrentVersionUninstallIMG2 URLInfoAbout
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindowsCurrentVersionUninstallIMG2 UninstallString