Home Malware Programs Spyware Modem Spy

Modem Spy

Posted: March 28, 2006

Modem Spy is a specific commercial malware application designed to record all telephone conversations made using a modem. Records can be sent to a configurable e-mail address. The software must be manually installed. Modem Spy runs on every Windows startup.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 modemspy.exe
    2 modemspy.ini
    3 upgrader.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CLASSES_ROOT.msplgDefaultIcon(Default)=C:ProgramFilesModemSpymodemspy.exeHKEY_CLASSES_ROOT.msplgShellOpenCommand(Default)=C:ProgramFilesModemSpymodemspy.exe%1HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunmodemspyHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallModemSpy
Loading...