Spyware.DesktopSpy

The installer program, which is also detected as Spyware.DesktopSpy, must install Spyware.DesktopSpy. The installation path is configurable, and the default path is %System%\DSA.

---

Note: %System% is a variable. The Spyware.DesktopSpy locates the System folder and copies itself to that location. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).

---

When the Spyware.DesktopSpy runs, it does the following:

1. Creates and adds the subkeys to the registry key:
   
   HKEY_LOCAL_MACHINE\SOFTWARE\KMiNT21\PersonalDesktopSpy
   
   
2. If the option to load this program at Windows startup is set, it will add the value:
   
   "DesktopSpy"="%System%DSA\dsa.exe"
   
   to the registry key:
   
   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
   
   
3. Saves screenshots to %System%\DSA\Images\ at a predefined interval.

Summary