Home Malware Programs Spyware Email Spy

Email Spy

Posted: March 28, 2006

Email Spy is a commercial e-mail monitoring and surveillance application that intercepts all outgoing letters and sends their exact copies to a configurable e-mail address bypassing most popular firewalls. Email Spy is not an actual spyware, but can be successfully used for malicious purposes, so it is classified as malware. The application must be manually installed.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 escp.exe
    2 vmsdrv.exe
    3 vmsdrv.sys
    4 vmsprog.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftRFC1156AgentCurrentVersionParametersTrapPollTimeMilliSecs=15000HKEY_LOCAL_MACHINESYSTEMCurrentControlSetEnumRootLegacyvmsdrvHKEY_LOCAL_MACHINESYSTEMCurrentControlSetEnumRootLegacyvmsprogHKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesVxDHKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesvmsdrvHKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesvmsprogHKEY_LOCAL_MACHINESoftwareMicrosoftCurrentVersionUninstallEmailSpyHKEY_LOCAL_MACHINESoftwareMicrosoftCurrentVersionUninstallEmailSpyPro

Related Posts

Loading...