Home Malware Programs Remote Administration Tools Autospy

Autospy

Posted: September 18, 2011

Autospy is a multi-functional worm and backdoor Trojan that allows criminals to access your PC for a variety of purposes, particularly stealing private information. Since SpywareRemove.com malware researchers have found that Autospy has been updated through several iterations, keeping your PC security software up-to-date should be considered a priority for protecting your computer from Autospy attacks. Like most forms of spyware (such as BO DLL, SpyEye, Zeus, Trojan-Spy.Banker.PPAW and Trojan-Spy.Win32.Zbot.aqzk), Autospy leaves no overt signs of Autospy's influence once Autospy has infected a PC. However, minor loss of system performance quality and altered network and security-related settings may be present during an Autospy infection. Since Autospy can monitor and steal extremely sensitive data, such as passwords and online banking info, you should use a competent anti-malware product to remove Autospy, as soon as you suspect its presence on your hard drive.

Autospy – An Infection That Truly Fits Its Name

Autospy is a form of Remote Administration Tool that its designer built with the supposed purpose of allowing widely-distributed spyware-style attacks (most likely with the intent of selling the program to those interested in using it to make a few dishonest bucks). Autospy has had three variants in the year 2002 and anti-malware software that can detect one variant isn't guaranteed to detect all variants by default. Keeping your threat definitions up-to-date is, therefore, crucial for any defense against Autospy.

Although Autospy was coded almost a decade ago, Autospy's distribution methods allow Autospy to be a threat to PCs even in today's modern environment. The most dangerous aspect of Autospy's proliferation that SpywareRemove.com malware researchers have uncovered is Autospy's ability to create copies of itself. This worm-like behavior makes deleting Autospy difficult, unless you can use scanner programs to detect and remove all copies of Autospy at one time.

Autospy's worm functions may also allow Autospy to infect new computers through local networks and removable hard drives. Since most worms with such features are able to do this without any direct interaction and only require that the uninfected PC access the same location that Autospy has infected, you should try to avoid contact between an Autospy-infected PC and an uninfected one.

Common signs of Autospy attempting to spread itself include unusual storage space changes in directories, the presence of unusual files (especially Autorun.inf files) and system settings that have been changed to make System or Hidden-flagged files unable to be viewed.

Why You Don't Want Autospy's Prying Eyes to Wriggle into Your Hard Drive

SpywareRemove.com malware experts have found that a typical Autospy RAT infection will be accompanied by the following risks, although other dangers may also be present in Autospy variants:

  • Random deletion of files, according to the instructions of the criminal who's using the client side of Autospy.
  • Hijacked web browsers that display irrelevant or hostile websites.
  • Applications that launch themselves without your permission.
  • Unusual system warning messages; these messages can be configured by the criminal who's using Autospy and may imitate normal system errors or be entirely different types of messages.
  • Unusual interface input that appears without your interaction.
  • Disabled Internet connectivity.
  • Program crashes.
  • Theft of various types of private information, including URLs that you've visited and your Windows Registry entries.

Criminals on the client side of Autospy may also use Autospy to generate fake credit card numbers. Despite the many types of attacks that Autospy can perform, an anti-malware scanner can find and delete Autospy; that is, if you're willing to find a scanner with a quality that's high enough to combat Remote Administration Tool-style PC threats.

Loading...