Threat Database Keyloggers MonitoringTool:Win32/Powerspy


By GoldSparrow in Keyloggers

Threat Scorecard

Threat Level: 80 % (High)
Infected Computers: 11
First Seen: March 28, 2011
OS(es) Affected: Windows

MonitoringTool:Win32/Powerspy, also called Powerspy, is a dangerous keylogging program that can record key inputs and other computer activity. In recording this data, MonitoringTool:Win32/Powerspy may allow a remote hacker to obtain it and then compromise a PC user's online accounts potentially leading to theft of money or a user’s identity. MonitoringTool:Win32/Powerspy may load at startup of Windows making it difficult to manually detect and remove. It is very important that MonitoringTool:Win32/Powerspy be removed as soon as possible to prevent damages.


15 security vendors flagged this file as malicious.

Anti-Virus Software Detection
AVG Logger.JCN
Fortinet Riskware/PowerSpy
Ikarus Trojan-Spy.Win32.KeyLogger
Antiy-AVL Monitor/Win32.PowerSpy.gen
AntiVir SPR/PowerSpy.aed
Kaspersky not-a-virus:Monitor.Win32.PowerSpy.bwj
eSafe Win32.SPRPowerSpy.Ae
Avast Win32:PowerSpy-S [PUP]
Symantec Spyware.AIMSniffer
Panda Suspicious file
Fortinet Spy/PowerSpy
BitDefender Gen:Trojan.Heur.bm0@X8Hm4Sdi
NOD32 a variant of Win32/PowerSpy.AA
McAfee Spyware-PowerSpy
Panda Trj/CI.A

SpyHunter Detects & Remove MonitoringTool:Win32/Powerspy

File System Details

MonitoringTool:Win32/Powerspy may create the following file(s):
# File Name MD5 Detections
1. winsvc.exe b35acfba8362e375684e0a3a70a7b9ef 8
2. wnaspid.exe 34501f9eb3fd4dd62c5fb63d2dca46ce 2
3. wnaspid.exe cbb6b0683f3b83d068f1064bf8370140 1
4. adsnwm.exe

Related Posts


Most Viewed