Home Malware Programs Spyware SpyAOL

SpyAOL

Posted: March 28, 2006

SpyAOL is a commercial malware application that captures online chat conversations made using AOL, AIM or ICQ messengers. It also monitors a webmail, Microsoft Outlook and Microsoft Outlook Express softwares and records received and sent e-mail messages. Gathered data is saved to a hard disk. SpyAOL must be manually installed. It secretly runs on every Windows startup.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 svehost.exe
    2 wincap.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USERSoftwareVBandVBAProgramSettingsWinCap90HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRuncccapHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallWinCap90_is1

Related Posts

Loading...