MonitoringTool:Win32/ActualSpy

MonitoringTool:Win32/ActualSpy is a seditious Trojan first released on 7 October 2008. The Trojan enters the user’s system with the express intention of monitoring all the user’s actions, and then relays this information to faceless cyber criminals. It will log keystrokes, capture screenshots and collect clipboard content, among other actions.

The Trojan also operates under various aliases across the web, some of which are:

not-a-virus:Monitor.Win32.ActualSpy.is
Spyware.ActualSpy
Potentially harmful program Logger.FIG
Spyware-ActualSpy

This Trojan enters the system through system and browser vulnerabilities and exploits, or by attaching itself to other malware. Because it performs all of its actions in the background, and enters the system surreptitiously the user will find it difficult to identify and remove MonitoringTool:Win32/ActualSpy without some help. The only notifications the user will receive as to the presence of MonitoringTool:Win32/ActualSpy on the system will come from installed security software.

However the presence of the following files on the PC is a clear indication that MonitoringTool:Win32/ActualSpy has infected the system:

Asmonitor.exe
Actualspy.chm
Hk.dll
hk2.dll
hprog.dll
settings.exe
f.bat
rights.bat

MonitoringTool:Win32/ActualSpy will make all your personal and sensitive information, including credit card and financial info available to strangers who might use it for credit card and identity fraud, among other criminal acts. In order to prevent this threat from entering your PC, enable your firewall and keep your PC security software up to date. If you fear infection, destroy MonitoringTool:Win32/ActualSpy immediately and take back your PC and privacy.