PC Remote Control
|
Description:
|
Spyware
|
|
Risk Level:
|
Low
|
|
Date of First Occurence:
|
Tuesday, May 06, 2008
|
|
Software Developer:
|
(unknown)
|
|
Brief Info:
|
Spyware is computer software that is installed surreptitiously on a personal computer to intercept or take partial control over the user's interaction with the computer, without the user's informed consent.
|
|
Removal:
|
This threat can be removed using "Spyware
Terminator"
|
RIMUOVI SPYWARE »
Geographical Distribution of Threat "PC Remote Control"
Threat Info
View All
Detected Items
- Detected Files:
%PROGRAMFILES%\PCRC\TCPIPRemote\TCPIPRemote.exe
MD5: 950F5D4DE4F9BF7E074B2F7FF16BD3B8 Size:595456
%PROGRAMFILES%\PCRC\Drivers\XP\FastMedia.sys
MD5: 052786D2A0185E16C7922A666DA492F4 Size:34752
%PROGRAMFILES%\PCRC\Drivers\2000\FastMedia.sys
MD5: 041C117E2BBD92A908E32A407A87C634 Size:35114
%PROGRAMFILES%\PCRC\CGIRemote\cgiremote.exe
MD5: F342884BE08AF2E6418FE0425ADA95DA Size:192512
%PROGRAMFILES%\PCRC\ATIRWPlugin.dll
MD5: F5E48AB4CC80930D5E5930B07099E3B3 Size:119808
%APPDATA%\Microsoft\Installer\{1907B657-62E3-4B07-9649-4A58E1CF438D}\_F77C7BB3EC4A_4C4B_A2AA_2250822410E6.exe
MD5: 8A0669049C1409A445C987BA8AAD8D06 Size:28672
%PROGRAMFILES%\PCRC\PCRemote.exe
MD5: C81C47B3FCE88C2D1E92F5666C040FE7 Size:918528
MD5: 3278726F8C2281DCC126841CBED2B606 Size:1541632
MD5: 07ABC04A9C7444917031DFC9ACD717AE Size:1526784
- Detected Files with variable Filenames:
Detecting items list:
- Files by Name
%PROGRAMFILES%\PCRC\ATIRWPlugin.dll
%PROGRAMFILES%\PCRC\PCRemote.exe
%PROGRAMFILES%\PCRC\CGIRemote\cgiremote.exe
%PROGRAMFILES%\PCRC\Drivers\2000\FastMedia.sys
%PROGRAMFILES%\PCRC\Drivers\XP\FastMedia.sys
%PROGRAMFILES%\PCRC\TCPIPRemote\TCPIPRemote.exe
%START_PROGRAMS%\PC Remote Control\CGIRemote information.lnk
%START_PROGRAMS%\PC Remote Control\PC Remote Control.lnk
%START_PROGRAMS%\PC Remote Control\TCPIPRemote.lnk
%APPDATA%\Microsoft\Installer\{1907B657-62E3-4B07-9649-4A58E1CF438D}\_F77C7BB3EC4A_4C4B_A2AA_2250822410E6.exe
- Files by Directories
%PROGRAMFILES%\PCRC %START_PROGRAMS%\PC Remote Control
- Registry Keys
HKCR\.pcr
HKCR\PCRemoteControl
HKCU\Software\Microsoft\Installer\Features\756B70913E2670B46994A4851EFC34D8
HKCU\Software\Microsoft\Installer\Products\756B70913E2670B46994A4851EFC34D8
HKCU\Software\PC Remote Control
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\PC Remote Control
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1907B657-62E3-4B07-9649-4A58E1CF438D}
- Registry Values
HKCU\Software\Microsoft\Installer\UpgradeCodes\F01D2F8D0EFB9AF40B5C041E12BE12C6 ValueName=756B70913E2670B46994A4851EFC34D8
«
Go to Software Database
