Home Malware Programs Keyloggers Application.WinSpy_Stealth_Monitor

Application.WinSpy_Stealth_Monitor

Posted: August 12, 2010

Application.WinSpy_Stealth_Monitor is a commercial application that logs all user keystrokes, records addresses of visited web sites, captures e-mail messages and online chat conversations. Gathered data can be sent to a configurable e-mail address or saved to a hard disk. Application.WinSpy_Stealth_Monitor must be manually installed. Application.WinSpy_Stealth_Monitor can also secretly run on every Windows startup.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Windir%\efee3f32f\brrve.nls
    2 %Windir%\efee3f32f\wrfsf.nls
    3 %Windir%\svchost32.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0][HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1][HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2][HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3][HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon][HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]

Related Posts

Loading...