Sprysocks Vspmsg Print Processor Persistence

Daniel Jeremiah@daniyyell

•updated Jun 20, 2026•0•0•4

Detects the VSPMsg print processor path and DLL name, which is associated with the SprySocks malware for persistence on Windows systems. The rule looks for specific strings related to the DLL name, print processor path, and common installation directories used by this malware.