Spy removal

Spyware Spy Information
Name: Spy Category: Keylogger Date: 2003-10-30 Author: Edwin T. Floyd Coded in: Visual Basic Dangerous: Yes

Spy is Keylogger which is malware.
Installing it is highly not recommended.

Spy description by Edwin T. Floyd:

SPY is a "remote control" application for NetBios compatible networks. The current version of SPY is intended as a demonstration of a network client-server program implemented in Pascal. Description ----------- SPY is a "remote control" application for NetBios compatible networks. The current version of SPY is intended as a demonstration of a network client-server program implemented in Pascal. We´ve found it somewhat useful for lending remote assistance to our network users. SPY & its accompanying documentation & source any file are: Copyright (c) 1989 by Edwin T. Floyd All rights reserved SPY & its accompanying documentation isn´t "shareware" & I don´t request payment for it. You may distribute & use it without restriction as long as you do not sell it & don´t hold me liable for any errors or consequential damages. If you wish to include this software as part of a commercial package offered for sale, you must obtain written permission from me, the author: Edwin T. Floyd [76067,747] #9 Adams Park Court Columbus, GA 31909 404-322-0076 (home) 404-576-3305 (work) Release History --------------- 11-17-89 1.3 - Corrected missed EGA/VGA mode changes, documentation 11-15-89 1.2 - Internal version, corrected EGA/VGA/MCGA application hang bugs 10-04-89 1.1 - Common functions separated to SPYSUP, recovery improved. 1st public release. 09-30-89 1.0 - Internal version, never released Operation --------- SPY is in two parts: SPY.EXE & SPYTSR.EXE. SPYTSR is a "Terminate & Stay Resident" application that must be running on the machine to be operated. Run like this: SPYTSR name [adapter] ..where "name" is the network name by which this invocation of SPYTSR is to be known, & (optional) "adapter" is a numeric network adapter number. If adapter is omitted, SPYTSR uses adapter zero. The network name may be up to fifteen characters long. All alphabetic characters in the name are shifted to upper case. The name may not contain spaces. The actual network name that SPYTSR adds to the adapter is the name specified padded to the right with spaces to fifteen characters & terminated with 0EFh as the sixteenth character. SPYTSR occupies about 36k (large for a TSR, but not too bad for one written in a high-level language), & does very little except listen till it receives a request from SPY. SPYTSR handles these types of requests: SendScreen - Reads the contents of the video buffer & cursor position into an internal buffer & transmits it to the client. StuffKeyboard - Copies Key & Scan Codes from the client´s message to an internal table where they´re inserted into the keyboard stream by the Int 16h intercept. To the user, typed-in key sequences simply appear out of nowhere. It is really spooky. Boot - Reboots the system running SPYTSR as if the person had performed a "three finger salute" (Ctrl-Alt-Del). DieQuietly - SPYTSR cancels all its sessions & commands, deletes its network name & removes itself from memory. SendScreenInfo - SPYTSR returns data about it is video screen, including the adapter type, video mode, number of rows & columns, & the maximum size of the buffer that SendScreen may transmit.

This Keylogger is also known as:

•Backdoor Program - named by Panda.
• Backdoor.Spy.13 - named by a.
• Backdoor.Spy.13 - named by Kaspersky.
• security risk or a "backdoor" program - named by F-Prot.
• spy - named by -.

>> Delete Spy automatically - Download Spyware Doctor

Spy Removal Instructions
Kill the following processes spy.exe, spytsr.exe
Remove the following files readme.txt, readmenow.txt, spy.exe, spytsr.exe.

Bookmark Spy page

Previous Spyware: Remove Spurf

Next Spyware: Remove Spy 1.3