Updated: February 13, 2007 11:35:24 AM
Type: Spyware
Publisher: http://www.spytech-web.com
Risk Impact: High
File Names: varies
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP
When Spyware.Spytech is executed, it does the following:
- Copies itself as C:\Program Files\svchost.exe.
- Adds the value:
"Srv32Win" = "C:\Program Files\svchost.exe"
to the registry key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
- Monitors the following items:
- Keystrokes typed
- Website visits
- Applications run
- Internet connections made
- Files and documents viewed
- Chat conversations
- Windows opened
- Outgoing email and webmail
- Downloads updates from www.spytech-web.com.