Home Malware Programs Keyloggers NetSpy

NetSpy

Posted: March 28, 2006

NetSpy is a commercial PC surveillance application that tracks user Internet activity, logs all keystrokes, takes screenshots and records addresses of visited web sites. Gathered data is saved to a hard disk. NetSpy can be used to block specified web sites and disable the Windows Task Manager. The software must be manually installed. It runs on every Windows startup.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 kbhook.dll
    2 nconfig.exe
    3 netspy.exe
    4 nsutil.exe
    5 nsys.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemDisableTaskMgr=0HKEY_CURRENT_USERSoftwareNetSpyHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDLLs\%System%kbhook.dllconfig.exesutil.exesyssys.exe

Related Posts

Loading...