Home Malware Programs Keyloggers SpyAnytime

SpyAnytime

Posted: March 28, 2006

SpyAnytime is a discontinued commercial PC surveillance application that tracks user activity, logs keystrokes, takes screenshots and records web sites visited. Gathered data is saved to a hard disk. The software is able to hide its running processes. SpyAnytime must be manually installed. It runs on every Windows startup.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 keybhook.dll
    2 svchost.exe
    3 sysmgr32.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunsvchost
  • The following CLSID's were detected:
    HKEY..\..\{CLSID Path}56ACC949-E6EE-4BF7-AF56-0A44FEDE4B42C793DC5A-4494-4C30-93B0-0784604871DC92D590B4-A6B6-4841-9C47-CB8D86BFDED0F3C047AF-74B1-4c61-9756-92F8D9F11A56
Loading...