Home Malware Programs Keyloggers Elfrah PCSpy

Elfrah PCSpy

Posted: March 28, 2006

Elfrah PCSpy is not an actual spyware, but a legitimate commercial product. However, it can be used for obvious malicious purposes. Elfrah PCSpy records keystrokes and tracks user activity. It doesn't distribute itself must be manually installed. Elfrah PCSpy runs on every Windows startup.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 svchost.exe
    2 swhdll.dll

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunSVCHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunSVC
Loading...