1. /
  2. Security Response/
  3. Spyware.Sa_PCSpy

Spyware.Sa_PCSpy

Updated:
February 13, 2007 11:39:22 AM
Type:
Spyware
Version:
2.20
Publisher:
WareSight Inc.
Risk Impact:
High
File Names:
sapcspy.exe,svchost.exe
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

Behavior


Spyware.Sa_PCSpy is a commercial spyware program that logs keystrokes, Web sites visited, programs used, and file and folder activity. It also has a screen capture logger and can be automatically run in a silent, undetectable mode.

These actions are configured in the programs Settings menu of Ssmgr.exe. When the program is in silent mode, it cannot be accessed until it is brought out of silent mode. This can be done with a hot-key combination (the default combination is Ctrl+Alt+Y).

Spyware.Sa_PCSpy is similar to another commercial spyware program, 007 Spy Software, which is detected as Spyware.007Spy. The main difference is that 007 Spy Software can send logs through FTP and email, while SpyAnytime PC Spy does not have that feature.

007 Spy Software may be an upgraded version of SpyAnytime PC Spy.

Symptoms


One or more files are detected as Spyware.Sa_PCSpy.

Transmission


SpyAnytime PC Spy must be manually installed.

Antivirus Protection Dates

  • Initial Rapid Release version September 9, 2004
  • Latest Rapid Release version May 1, 2011 revision 025
  • Initial Daily Certified version September 9, 2004 revision 002
  • Latest Daily Certified version May 2, 2011 revision 002
  • Initial Weekly Certified release date September 15, 2004
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report, Volume 17
Symantec DeepSight Screensaver