XpressRemote

Description: Spyware
Risk Level: Low
Date of First Occurence: Wednesday, June 18, 2008
Software Developer: (unknown)
Brief Info: Spyware is computer software that is installed surreptitiously on a personal computer to intercept or take partial control over the user's interaction with the computer, without the user's informed consent.
Removal: This threat can be removed using "Spyware Terminator"

ELIMINAR SPYWARE »

Geographical Distribution of Threat "XpressRemote"

Threat Info

View All

Detected Items

  1. Detected Files: %TEMP%\xrserverinstaller.exe MD5: C0B56CDE30A6246144431761E65D92FE Size:513097
  2. Detected Files with variable Filenames:

Detecting items list:

  1. Files by Name %PROGRAMFILES%\XpressRemote Server\uninst.exe %PROGRAMFILES%\XpressRemote Server\XRserver.exe %START_PROGRAMS%\XpressRemote Server\Help.lnk %START_PROGRAMS%\XpressRemote Server\Server.lnk %START_PROGRAMS%\XpressRemote Server\Uninstall.lnk %START_PROGRAMS%\XpressRemote Server\Website.lnk %TEMP%\xrserverinstaller.exe
  2. Files by Directories %PROGRAMFILES%\XpressRemote Server %START_PROGRAMS%\XpressRemote Server
  3. Registry Keys HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\XpressRemote Server HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\XRserver.exe HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\XpressRemote Server

« Go to Software Database