Spyware.InvisibleASpy

Updated: February 13, 2007 11:41:05 AM

Type: Spyware

Version: 2.3

Publisher: Alin Inclezan

Risk Impact: High

File Names: ias.exe

Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

When Spyware.InvisibleASpy is executed, it performs the following actions:

Creates the following files:
- %ProgramFiles%\Invisible Activity Spy 2.3\Ias.exe (logging executable, detected as Spyware.InternetASpy)
- %ProgramFiles%\Invisible Activity Spy 2.3\ias.log
- %ProgramFiles%\Invisible Activity Spy 2.3\iasconfig.exe (key logger configuration utility)
- %ProgramFiles%\Invisible Activity Spy 2.3\iasdll.dll (hook file, detected as Spyware.InternetASpy)
- %ProgramFiles%\Invisible Activity Spy 2.3\iasmailsend.exe (mail sender)
- %ProgramFiles%\Invisible Activity Spy 2.3\license.txt
- %ProgramFiles%\Invisible Activity Spy 2.3\register.txt
- %ProgramFiles%\Invisible Activity Spy 2.3\unins000.exe (uninstaller)
- %ProgramFiles%\Invisible Activity Spy 2.3\unins000.dat
  
  Note: %ProgramFiles% is a variable that refers to the program files folder. By default, this is C:\Program Files.
Creates the following registry keys:

HKEY_LOCAL_MACHINE\Software\Ias HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Invisible Activity Spy_is1
Adds the value:

"ias"="%ProgramFiles%\Invisible Activity Spy 2.3\ias.exe"

to the registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Runso that the Spyware runs every time Windows starts.

Summary

Search Threats

Search by name

_{Example: W32.Beagle.AG@mm}