Home Malware Programs Spyware Spie

Spie

Posted: March 28, 2006

Spie is a malware spyware that records information the user enters into many web forms and logs addresses of visited web sites. Spie can steal user confidential data including some login names, passwords and credit card numbers. The spyware is usually dropped by other unsolicited software. It can also be manually installed. Spie works as an Internet Explorer add-on and therefore runs every time the user launches the web browser.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 _setup.dll
    2 isuninst.exe
    3 mscack.dll
    4 setup.exe
    5 spie.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerMenuOrderStartMenuProgramsspIEHKEY_LOCAL_MACHINESOFTWAREackwareHKEY_LOCAL_MACHINESOFTWAREClassesMSCACK.MSCACKHKEY_LOCAL_MACHINESOFTWAREClassesMSCACK.MSCACK.1HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionAppPathsspIE.exe
  • The following CLSID's were detected:
    HKEY..\..\{CLSID Path}CB7CE221-955E-11D3-81AA-344203C10000CB7CE222-955E-11D3-81AA-344203C10000CB7CE223-955E-11d3-81AA-344203C10000
Loading...