SpIE
|
Description:
|
Spyware
|
|
Risk Level:
|
Medium
|
|
Date of First Occurence:
|
Tuesday, May 27, 2008
|
|
Software Developer:
|
(unknown)
|
|
Brief Info:
|
Spie is a program which logs URLs visited and information entered into Web forms in Internet Explorer. The program may steal sensitive information such as passwords and card numbers.
|
|
Removal:
|
This threat can be removed using "Spyware
Terminator"
|
REMOVER SPYWARE »
Geographical Distribution of Threat "SpIE"
Threat Info
View All
Detected Items
- Detected Files:
%PROGRAMFILES%\Zackware\spIE\spIE.exe
MD5: CEC07D069B7D885492C77AC34C24F617 Size:184320
%WINDIR%\mscack.dll
MD5: EF1F91286464E57EAA2D16788CEBBE89 Size:172032
- Detected Files with variable Filenames:
Detecting items list:
- Files by Name
%START_PROGRAMSALL%\spIE\Configure spIE.lnk
%ProgramFiles%\Zackware\spIE\config.dat
%ProgramFiles%\Zackware\spIE\spIE.exe
%ProgramFiles%\Zackware\spIE\user.dat
%Windir%\mscack.dll
- Files by Directories
%ProgramFiles%\Zackware\spIE
%START_PROGRAMSALL%\spIE
- Files by CLSID or Name
CLSID=CB7CE223-955E-11d3-81AA-344203C10000
- Registry Keys
HKLM\SOFTWARE\Classes\Interface\{CB7CE222-955E-11D3-81AA-344203C10000}
HKLM\SOFTWARE\Classes\TypeLib\{CB7CE221-955E-11D3-81AA-344203C10000}
HKLM\SOFTWARE\Classes\MSCACK.MSCACK
HKLM\SOFTWARE\Classes\MSCACK.MSCACK.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\spIE.exe
HKLM\SOFTWARE\Zackware
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\spIE
«
Go to Software Database
