Home Malware Programs Spyware Surfing Spy

Surfing Spy

Posted: March 28, 2006

Surfing Spy is a commercial malware product designed to record addresses of all the web sites visited in Internet Explorer and Netscape web browsers. Gathered data is saved into a file on a hard disk. The application must be manually installed. Surfing Spy automatically runs on every Windows startup.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 ssadmin.exe
    2 sshook.dll
    3 ssytem.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USERSoftwareMicrosoftWindowsNTCurrentVersionWindowsLoad=%Windir%ssytem.exeHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunServicesSSPY=%Windir%ssytem.exe
Loading...