XpcSpy
|
Description:
|
Spyware
|
|
Risk Level:
|
High
|
|
Date of First Occurence:
|
Wednesday, April 23, 2008
|
|
Software Developer:
|
(unknown)
|
|
Brief Info:
|
XpcSpy is a spyware program that is used to secretly monitor other users by logging keystrokes and screen shots.
|
|
Removal:
|
This threat can be removed using "Spyware
Terminator"
|
SCAN & REMOVE NOW »
Geographical Distribution of Threat "XpcSpy"
Threat Info
View All
Detected Items
- Detected Files:
%SYSDIR%\wintft.dll
MD5: 38D355F0FC835542DDC6583C5F8AEABD Size:3400
MD5: 6DBD68F5BF34F5D1E29D645948AD5202 Size:3400
%SYSDIR%\rx.exe
MD5: 2439762098EBDFC2D417F5FEA4683745 Size:24064
MD5: D0CB60D8A536E84C644DBDB7065DA7A2 Size:260096
MD5: 19B6137FDCCCCD8838A1D3FC9F8498EA Size:10240
MD5: B6D6DF34E534DCCCD5A9DAB45F0EFB64 Size:62168
MD5: 9B1889DAEE21206E70318D10BCA8F191 Size:62168
MD5: C853373764D86B927472766BD622E1EE Size:212992
- Detected Files with variable Filenames:
Detecting items list:
- Files by Name
%ProgramFiles%\XSoftware\XPCSpyPro\XPCSpyPro.exe
%ProgramFiles%\XSoftware\Working\XPCSpyPro.exe
%ProgramFiles%\XSoftware\XPCSpyPro\AppSpy.dll
%ProgramFiles%\XSoftware\XPCSpyPro\IESpy.dll
%ProgramFiles%\XSoftware\XPCSpyPro\KeySpy.dll
%ProgramFiles%\XSoftware\Working\AppMon.dll
%ProgramFiles%\XSoftware\Working\IEMon.dll
%ProgramFiles%\XSoftware\Working\KeyMon.dll
%ProgramFiles%\XSoftware\unins000.exe
%sysdir%\systemout.exe
%sysdir%\rx.exe
%sysdir%\wintft.dll
%sysdir%\drivers\systemin.sys
- Files by Directories
%ProgramFiles%\XSoftware\XPCSpyPro
%ProgramFiles%\XSoftware\working
- Files by CLSID or Name
CLSID=17A54BFC-8214-4F5C-B1A7-A161BFA5FDCC
CLSID=BA41EE62-B36A-4344-850C-9221073CF6B9
CLSID=E3E1DC8E-0CE1-4D96-8D49-E5B2B7B51ADA
«
Go to Software Database