WatchRight
|
Description:
|
Spyware
|
|
Risk Level:
|
Medium
|
|
Date of First Occurence:
|
Wednesday, April 16, 2008
|
|
Software Developer:
|
(unknown)
|
|
Brief Info:
|
WatchRight is an application which monitors instant messages, chatroom conversations, email messages, message board postings and web sites visited while online. The application logs AIM and AOL IM conversations and postings and can be configured to log all
|
|
Removal:
|
This threat can be removed using "Spyware
Terminator"
|
RIMUOVI SPYWARE »
Geographical Distribution of Threat "WatchRight"
Threat Info
View All
Detected Items
- Detected Files:
%PROGRAMFILES%\Watch Right\wrclock.exe
MD5: 37F076A797646332FD979092A7671718 Size:593920
%PROGRAMFILES%\Watch Right\BPSSI1.exe
MD5: 11F5A31C474FCE5EFFC700D325EC4C17 Size:90112
%SYSDIR%\wrmont.exe
MD5: 607DCEB8BFEC7AA1B2D39D79EF2FA2D3 Size:311296
%SYSDIR%\wrie.dll
MD5: 89DF56AB75390CCB6CCC80BBE3189B63 Size:45056
- Detected Files with variable Filenames:
Detecting items list:
- Files by Name
%sysdir%\wrexec.exe
%sysdir%\wrie.dll
%sysdir%\wrmont.exe
%ProgramFiles%\Watch Right\bpscomm.dll
%ProgramFiles%\Watch Right\BPSSI1.exe
%ProgramFiles%\Watch Right\rwfaa.plh
%ProgramFiles%\Watch Right\wrclock.exe
%ProgramFiles%\Watch Right\wrin.inz
%START_PROGRAMS%\BPS SoftWare\BPS System Info.lnk
%START_PROGRAMS%\BPS SoftWare\Watch Right.lnk
- Files by CLSID or Name
CLSID=38D5592B-1B6F-4F9B-9879-58B696405AC1
- Registry Keys
HKCR\wrie.clsIEWR
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Watch Right
HKLM\SOFTWARE\BPS SoftWare\Watch Right
HKCU\Software\BPS SoftWare\Watch Right
«
Go to Software Database
