Wednesday, November 12, 2008

XPCSpy Spyware

Removing XPCSpy
Categories: Spyware
Spyware is computer software that is installed surreptitiously on a personal computer
to intercept or take partial control over the user's interaction
with the computer, without the user's informed consent.

While the term spyware suggests software that secretly monitors the user's behavior,
the functions of spyware extend well beyond simple monitoring.

Spyware programs can collect various types of personal information,
such as Internet surfing habit, sites that have been visited,
but can also interfere with user control of the computer in other ways,
such as installing additional software, redirecting Web browser activity,
accessing websites blindly that will cause more harmful viruses,
or diverting advertising revenue to a third party.

Spyware can even change computer settings, resulting in slow connection speeds,
different home pages, and loss of Internet or other programs.
In an attempt to increase the understanding of spyware, a more formal classification
of its included software types is captured under the term privacy-invasive software.

Visible Symptoms:
Files in system folders:
[%SYSTEM%]\rx.exe
[%SYSTEM%]\SysDll32.dll
[%SYSTEM%]\systemout.exe
[%SYSTEM%]\rx.exe
[%SYSTEM%]\SysDll32.dll
[%SYSTEM%]\systemout.exe

How to detect XPCSpy:

Files:
[%SYSTEM%]\rx.exe
[%SYSTEM%]\SysDll32.dll
[%SYSTEM%]\systemout.exe
[%SYSTEM%]\rx.exe
[%SYSTEM%]\SysDll32.dll
[%SYSTEM%]\systemout.exe

Folders:
[%PROGRAM_FILES%]\xsoftware
[%PROGRAMS%]\123 xpcspy
[%PROGRAM_FILES%]\xpcspy

Registry Keys:
HKEY_CLASSES_ROOT\appmon.tshellexecutehook
HKEY_CLASSES_ROOT\clsid\{17a54bfc-8214-4f5c-b1a7-a161bfa5fdcc}
HKEY_CLASSES_ROOT\clsid\{ba41ee62-b36a-4344-850c-9221073cf6b9}
HKEY_CLASSES_ROOT\clsid\{e3e1dc8e-0ce1-4d96-8d49-e5b2b7b51ada}
HKEY_CLASSES_ROOT\iemon.iespy
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{17a54bfc-8214-4f5c-b1a7-a161bfa5fdcc}
HKEY_CLASSES_ROOT\appspy.tshellexecutehook
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\systemoutservice

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellpath
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellpath
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall

Removing XPCSpy:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:

No comments: