Follow:

 

MonitoringTool:Win32/ActualSpy


MonitoringTool:Win32/ActualSpy is a unwanted program, which can be used to monitor computer use without the knowledge of the current user. MonitoringTool:Win32/ActualSpy can log keystrokes, capture screenshots, and get clipboard content.


What to do now

To detect and remove this program and other unwanted software that may be installed in your computer, run a full-system scan with an up-to-date antispyware product such as the following:
 

Threat behavior

MonitoringTool:Win32/ActualSpy is a unwanted program, which can be used to monitor computer use without the knowledge of the current user. MonitoringTool:Win32/ActualSpy can log keystrokes, capture screenshots, and get clipboard content.
Installation
MonitoringTool:Win32/ActualSpy may be installed in the following folders:
 
%ProgramFiles%\ACSPMonitor
%CommonProgramFiles%\ActualSpy
 
MonitoringTool:Win32/ActualSpy is composed of the following files:
 
Asmonitor.exe
Actualspy.chm
Hk.dll
hk2.dll
hprog.dll
settings.exe
f.bat
rights.bat
 
A shortcut to the executable Asmonitor.exe may exist in Quicklaunch and Desktop if the user chooses to do so at installation:
 
Additional Information
The user interface of Win32/ActualSpy may appear as follows:
 
 
Analysis by Subratam Biswas

Symptoms

System Changes
The following system changes may indicate the presence of MonitoringTool:Win32/ActualSpy
  • The presence of the following files:
    Asmonitor.exe
    Actualspy.chm
    Hk.dll
    hk2.dll
    hprog.dll
    settings.exe
    f.bat
    rights.bat

    within the following folders:
    %ProgramFiles%\ACSPMonitor
    %CommonProgramFiles%\ActualSpy

Prevention


Alert level: Severe
First detected by definition: 1.45.287.0
Latest detected by definition: 1.203.1578.0 and higher
First detected on: Oct 07, 2008
This entry was first published on: Jun 04, 2009
This entry was updated on: Sep 24, 2014

This threat is also detected as:
  • not-a-virus:Monitor.Win32.ActualSpy.is (Kaspersky)
  • Spyware.ActualSpy (Symantec)
  • Potentially harmful program Logger.FIG (AVG)
  • Spyware-ActualSpy (McAfee)