PlanetRemote
|
Description:
|
Spyware
|
|
Risk Level:
|
Low
|
|
Date of First Occurence:
|
Tuesday, June 03, 2008
|
|
Software Developer:
|
(unknown)
|
|
Brief Info:
|
Spyware is computer software that is installed surreptitiously on a personal computer to intercept or take partial control over the user's interaction with the computer, without the user's informed consent.
|
|
Removal:
|
This threat can be removed using "Spyware
Terminator"
|
RIMUOVI SPYWARE »
Geographical Distribution of Threat "PlanetRemote"
Threat Info
View All
Detected Items
- Detected Files:
%SYSDIR%\pdnscpl.cpl
MD5: A2494F60C25260945B81DF41F62EA39F Size:102400
MD5: D5C232B874497E28DBC7894E787294CB Size:102400
%SYSDIR%\pdnsreg.exe
MD5: 9A53D45908E889395599DE911DB3AA5E Size:210240
- Detected Files with variable Filenames:
Detecting items list:
- Files by Name
%PROGRAMFILES%\NewAce Corporation\PlanetRemote\idshell.dll
%PROGRAMFILES%\NewAce Corporation\PlanetRemote\pdshell.exe
%PROGRAMFILES%\NewAce Corporation\PlanetRemote\premview.exe
%PROGRAMFILES%\NewAce Corporation\PlanetRemote\ext\mshlicense.dll
%PROGRAMFILES%\NewAce Corporation\PlanetRemote\ext\mshlog.dll
%PROGRAMFILES%\NewAce Corporation\PlanetRemote\ext\mshname.dll
%PROGRAMFILES%\NewAce Corporation\PlanetRemote\ext\mshredir.dll
%PROGRAMFILES%\NewAce Corporation\PlanetRemote\ext\mshservice.dll
%PROGRAMFILES%\NewAce Corporation\PlanetRemote\ext\mshupdate.dll
%PROGRAMFILES%\NewAce Corporation\PlanetRemote\ext\mshupnp.dll
%PROGRAMFILES%\NewAce Corporation\PlanetRemote\ext\mshvnc.dll
%SystemDiskRoot%\Documents and Settings\All Users\Desktop\PlanetRemote Viewer.lnk
%SystemDiskRoot%\Documents and Settings\All Users\Desktop\PlanetRemote.lnk
%START_PROGRAMSALL%\PlanetDNS\PlanetRemote\Contact PlanetDNS Support.url
%START_PROGRAMSALL%\PlanetDNS\PlanetRemote\Online Support.url
%START_PROGRAMSALL%\PlanetDNS\PlanetRemote\PlanetDNS License Manager.lnk
%START_PROGRAMSALL%\PlanetDNS\PlanetRemote\PlanetRemote Help.lnk
%START_PROGRAMSALL%\PlanetDNS\PlanetRemote\PlanetRemote Viewer.lnk
%START_PROGRAMSALL%\PlanetDNS\PlanetRemote\PlanetRemote.lnk
%START_PROGRAMSALL%\PlanetDNS\PlanetRemote\Read Me.lnk
%SYSDIR%\pdnscpl.cpl
%SYSDIR%\PDNSCPL.HLP
%SYSDIR%\pdnsreg.exe
%SYSDIR%\pdnsreg.hlp
- Files by Directories
%PROGRAMFILES%\NewAce Corporation\PlanetRemote %START_PROGRAMSALL%\PlanetDNS\PlanetRemote
- Registry Keys
HKLM\SOFTWARE\NewAce Corporation
HKLM\SOFTWARE\NewAce Corporation\PlanetRemote
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A3E24F85-0EAE-4376-AE14-A0CBBDF80A7D}
«
Go to Software Database
