Chat Watch

Chat Watch records any keystrokes that are entered from the keyboard.Auto.Keylogger records everything that is entered from the keyboard to an encrypted file. Documents, e-mails, chat conversations, typed URL addresses, passwords, internet forms, etc. will be recorded. Caps, symbols, and backspaces are processed, so everything is recorded just like the original documents. It runs stealthily and is invisible to the users, so that users don't know that their keystrokes are being recorded.0

General information:

Malware Name: Chat Watch
Malware Type: Key Logger
Company Name: Zemerick Software Inc.
Company URL: http://www.zemericks.com/
Threat Level: Severe Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation

Company Description:

Zemerick Software Inc. is a privately owned company in beautiful Oak Hill, West Virginia. Founded in 1999, and it create innovative and useful software for parents, network administrators, and casual computer users. It provides computing safety and security to both individuals and organizations by continuing to design and develop reliable and high-quality software.

Spyware Description:

Chat Watch records any keystrokes that are entered from the keyboard.Auto.Keylogger records everything that is entered from the keyboard to an encrypted file. Documents, e-mails, chat conversations, typed URL addresses, passwords, internet forms, etc. will be recorded. Caps, symbols, and backspaces are processed, so everything is recorded just like the original documents. It runs stealthily and is invisible to the users, so that users don't know that their keystrokes are being recorded.0

Characteristics/Symptoms:

    -> Monitor and capture data from computers -> Run in stealth mode -> Intercepts keystrokes from the keyboard and records them in a log -> Starts with the operating system0

Additional information might be found here:

google Search at Google for Chat Watch
bing Search at Bing for Chat Watch
yahoo Search at Yahoo for Chat Watch

Processes Running:

cw4.exe

File information Created after Installation:

File Location Size (Bytes) Type
C:\Program Files\CW4\cwmail.dll 749848 Application Extension
C:\Program Files\CW4\cwnettrillianplugin.zip 73453 WinZip File
C:\Program Files\CW4\notification.txt 136 Text Document

Folder information Created after Installation:

Folder Location
C:\Program Files\CW4

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name