Spyware Information Name: ASpam Threat Level: Category: Trojan Aliases: Amcis, Drvman Variants: ASpam/Amcis: installs the BHO under the filename AMCIS32.DLL, with object name Amcis32. ASpam/Drvman: the file and object name is DRVMAN32 instead and the classid is different. Spyware Characteristics Description: ASpam is a remote access trojan implemented as an IE Browser Helper Object. It is not really Unsolicited Commercial Software as it has no known commercial aim. Properties: Stays resident in background. Stealth: hides itself from user. Connects to the internet by itself. What it does? Advertising: No. Privacy violation: No. Security issues: Yes, Gives the attacker user-level access to the machine it is installed on. Stability problems: None Known. Method of infection The installer ASPAM.EXE was attached to a mass-mailing purported to come from Microsoft (aspam@microsoft.com), offering an anti-spam feature for Outlook Express. The actual author is not currently known. Removal Instructions bulletproofsoft.com "Spyware Remover" is the best tool for the removal of this spyware. Links Site: Symantec's info on Amcis and Drvman. McAfee/AVERT's info on the Amcis variant.