Symantec.com > Enterprise > Security Response > Infostealer.SoapSpy

Infostealer.SoapSpy

Risk Level 1: Very Low

Discovered:
September 3, 2002
Updated:
February 13, 2007 12:09:47 PM
Also Known As:
PWSteal.SoapSpy
Type:
Trojan Horse
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows NT, Windows XP

Infostealer.SoapSpy is password-stealing Trojan. It collects user passwords, intercepts keystrokes, and submits the stolen information the author of the Trojan. The Trojan attempts to disable some firewall programs by terminating the active processes. Infostealer.SoapSpy is a Visual C++ application, packed with UPX v0.76.1-1.22.

NOTE : Definitions prior to May 10, 2006 may detect this threat as PWSteal.SoapSpy

Antivirus Protection Dates

  • Initial Rapid Release version September 3, 2002
  • Latest Rapid Release version August 20, 2008 revision 017
  • Initial Daily Certified version September 3, 2002
  • Latest Daily Certified version August 20, 2008 revision 016
  • Initial Weekly Certified release date September 4, 2002
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Moderate

Damage

  • Damage Level: Low

Distribution

  • Distribution Level: Low
Writeup By: Serghei Sevcenco

Search Threats

Search by name

Example: W32.Beagle.AG@mm
ThreatCon Widget
Internet Security Threat Report, Volume 16
Symantec DeepSight Screensaver