Spyware.PowerSpy

By Sumo3000 in Spyware

Threat Scorecard

Threat Level:	80 % (High)
Infected Computers:	244

First Seen:	July 24, 2009
Last Seen:	February 8, 2021
OS(es) Affected:	Windows

Spyware.PowerSpy is a privacy threat that can secretly infiltrate a system and monitor a user's activities. Spyware.PowerSpy is related to Power Spy which is a monitoring software from eMatrixSoft, Inc. In the wrong hands, Spyware.PowerSpy can be maliciously used to steal a victim's private information by monitoring applications used, websites visited, electronic messages sent or received and capturing keystrokes. Spyware.PowerSpy is also able to take screen shots of a system. Spyware.PowerSpy will store the stolen information in log files and then send the files to a predefined e-mail address. It's advisable to remove Spyware.PowerSpy from your PC if it was not intentionally installed.

Table of Contents

Aliases

7 security vendors flagged this file as malicious.

Anti-Virus Software	Detection
Sophos	Mal/VB-G
McAfee-GW-Edition	Heuristic.LooksLike.Riskware.PowerSpy.P
Ikarus	not-a-virus:Monitor.Win32.PowerSpy
BitDefender	Gen:Trojan.Heur.bm0@XmGa3Tki
a-squared	Riskware.Monitor.Win32.PowerSpy!IK
Prevx1	Malware.Gen
Kaspersky	not-a-virus:Monitor.Win32.PowerSpy.401

SpyHunter Detects & Remove Spyware.PowerSpy

File System Details

Spyware.PowerSpy may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	f0904192_system.exe	a9c1c3c9c5e621d7b573aa5d17aec2ef	132
Name: f0904192_system.exe MD5: a9c1c3c9c5e621d7b573aa5d17aec2ef Size: 61.44 KB (61440 bytes) Detections: 132 Type: Executable File Path: C:\Users\<username>\AppData\Local\Temp\HBCD\recup_dir.2\f0904192_system.exe Group: Malware file Last Updated: February 8, 2021
2.	system.exe	c8e9f6e7e5547e9a09349b2554996f46	84
Name: system.exe MD5: c8e9f6e7e5547e9a09349b2554996f46 Size: 61.44 KB (61440 bytes) Detections: 84 Type: Executable File Path: C:\Program Files (x86)\P\system.exe Group: Malware file Last Updated: December 6, 2020
3.	system.exe	68188de4788b856c18a4f274d3fad490	7
Name: system.exe MD5: 68188de4788b856c18a4f274d3fad490 Size: 319.48 KB (319488 bytes) Detections: 7 Type: Executable File Path: %PROGRAMFILES%\P Group: Malware file Last Updated: October 1, 2016
4.	system.exe	df31de3b6e3781bb8bfbfb279ab69f3e	6
Name: system.exe MD5: df31de3b6e3781bb8bfbfb279ab69f3e Size: 319.48 KB (319488 bytes) Detections: 6 Type: Executable File Path: %PROGRAMFILES%\P Group: Malware file Last Updated: October 1, 2016
5.	system.exe	6f5cd9d6fdb89738a5ac334b13f2c233	5
Name: system.exe MD5: 6f5cd9d6fdb89738a5ac334b13f2c233 Size: 61.44 KB (61440 bytes) Detections: 5 Type: Executable File Path: %PROGRAMFILES(x86)%\P Group: Malware file Last Updated: October 1, 2016
6.	system.exe	f88d504de94d375671ee854f5819fe33	1
Name: system.exe MD5: f88d504de94d375671ee854f5819fe33 Size: 61.44 KB (61440 bytes) Detections: 1 Type: Executable File Path: %PROGRAMFILES%\P Group: Malware file Last Updated: October 1, 2016
7.	system.exe	315493fd9183aaea78ce21966bd8f6e5	1
Name: system.exe MD5: 315493fd9183aaea78ce21966bd8f6e5 Size: 90.11 KB (90112 bytes) Detections: 1 Type: Executable File Path: %PROGRAMFILES(x86)%\P Group: Malware file Last Updated: October 1, 2016
8.	pykeylogger-0.8.2a_dist.exe	25405886c76f8c869620eef93f39e966	1
Name: pykeylogger-0.8.2a_dist.exe MD5: 25405886c76f8c869620eef93f39e966 Size: 3.19 MB (3190074 bytes) Detections: 1 Type: Executable File Path: c:\Users\<username>\downloads Group: Malware file Last Updated: June 8, 2023
9.	%ProgramFiles%\SKPCS\data\eventsys.exe
Name: %ProgramFiles%\SKPCS\data\eventsys.exe Type: Executable File Group: Malware file
10.	%ProgramFiles%\SKPCS\COMCTL32.OCX
Name: %ProgramFiles%\SKPCS\COMCTL32.OCX Group: Malware file
11.	%ProgramFiles%\SKPCS\data\ps_demo_report.html
Name: %ProgramFiles%\SKPCS\data\ps_demo_report.html Group: Malware file
12.	%ProgramFiles%\SKPCS\data\psini.ini
Name: %ProgramFiles%\SKPCS\data\psini.ini Group: Malware file
13.	%ProgramFiles%\SKPCS\data\emxfile.emx
Name: %ProgramFiles%\SKPCS\data\emxfile.emx Group: Malware file
14.	adsnwm.exe	cd8876f46fe06e625b437539cd9f75b9	0
Name: adsnwm.exe MD5: cd8876f46fe06e625b437539cd9f75b9 Size: 20.48 KB (20480 bytes) Detections: 0 Type: Executable File Group: Malware file Last Updated: January 8, 2010

Registry Details

Spyware.PowerSpy may create the following registry entry or registry entries:

HKEY..\..\..\..{RegistryKeys}

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{86CF1D34-0C5F-11D2-A9FC-0000F8754DA1}\2.0]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{6B7E6392-850A-101B-AFC0-4210102A8DA7}\1.3\0\win32]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{86CF1D34-0C5F-11D2-A9FC-0000F8754DA1}\2.0\HELPDIR]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{48E59290-9880-11CF-9754-00AA00C00908}\1.0\HELPDIR]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{86CF1D34-0C5F-11D2-A9FC-0000F8754DA1}\2.0\0\win32]

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Spyware.PowerSpy

Threat Scorecard

EnigmaSoft Threat Scorecard

Aliases

SpyHunter Detects & Remove Spyware.PowerSpy

File System Details

Registry Details

Submit Comment

Trending

Rzfu Ransomware

'YouPorn' Email Scam

Rzkd Ransomware

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen