Home Malware Programs Keyloggers LorSpy

LorSpy

Posted: March 28, 2006

LorSpy is a malicious keylogger that records all user keystrokes and sends stolen data to the attacker by e-mail using own mail engine. LorSpy automatically runs on every Windows startup.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 mpr16.dll
    2 powerprof.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunpowerprofHKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunpowerprof.exe
Loading...