| Port No | 40412 |
| Service Name | The Spy |
| RFC Doc | 0 |
| Protocol | TCP |
| Description | The Spy Beta 1 is just a remote keylogger. It captures keys only in real time (does not actually save logged keys while offline or not connected). It is also buggy and crashed quickly after the client disconnected |
| Reference Link | The Spy |
| Attack | It Autloads: Registry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ Key :Systray Features: Log all keys typed by the server Fix: Remove the Systray key in the registry located at HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run Which can be done with regedit or any other registry editing program Reboot the computer or close defrags.exe. Delete the trojan file defrags.exe in the windows directory |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.