Home Malware Programs Spyware Application.Yahoo_Messenger_Spy

Application.Yahoo_Messenger_Spy

Posted: April 28, 2010

Application.Yahoo_Messenger_Spy is a malicious spyware program which allows anyone to monitor, block or record Yahoo Messenger conversations remotely. Removal of this program is recommended if not installed for a purpose as it may lead to identity theft or invasion of privacy. Application.Yahoo_Messenger_Spy is also known to download corrupt files from the Internet which may cause system malfunction. Be very careful and use updated anti-spyware software to remove Application.Yahoo_Messenger_Spy from the compromised system.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %CommonPrograms%\IMMonitor Yahoo Messenger Spy\IMMonitor Yahoo Messenger Spy.lnk
    2 %CommonPrograms%\IMMonitor Yahoo Messenger Spy\Uninstall.lnk
    3 %CommonPrograms%\IMMonitor Yahoo Messenger Spy\Visit Our Web Site.lnk
    4 %DesktopDir%\IMMonitor Yahoo Messenger Spy.lnk
    5 %ProgramFiles%\IMMonitor\IMMonitor Yahoo Messenger Spy\Config.ini
    6 %ProgramFiles%\IMMonitor\IMMonitor Yahoo Messenger Spy\Infomation.txt
    7 %ProgramFiles%\IMMonitor\IMMonitor Yahoo Messenger Spy\License.txt
    8 %ProgramFiles%\IMMonitor\IMMonitor Yahoo Messenger Spy\unins000.dat
    9 %ProgramFiles%\IMMonitor\IMMonitor Yahoo Messenger Spy\unins000.exe
    10 %ProgramFiles%\IMMonitor\IMMonitor Yahoo Messenger Spy\Visit Home Page.url
    11 %ProgramFiles%\IMMonitor\IMMonitor Yahoo Messenger Spy\WinPcap.exe
    12 %ProgramFiles%\IMMonitor\IMMonitor Yahoo Messenger Spy\YahooCheck.exe
    13 %ProgramFiles%\IMMonitor\IMMonitor Yahoo Messenger Spy\YahooCheck.exe.manifest

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\SOFTWARE\IMMONITOR1[HKEY_LOCAL_MACHINE\SOFTWARE\IMMONITOR1\Yahoo Checker]HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}IMMonitor Yahoo Messenger Spy_is1]
Loading...