Multi-Remote Shutdown Manager

Multi-Remote Shutdown Manager is a fast way to shutdown the computers the user administer. It is designed for network administrators working with groups of systems. It includes, Force applications to close, Force reboot after shutdown, Abort an in-progress shutdown. Multi-Remote Shutdown Manager is an easy and fast way to shutdown the computers. It includes Low risk threats are not harm our machine or compromise our privacy and security unless they have been installed without your knowledge and consent. A low risk threat may be a program, network tool, or system utility that you knowingly and deliberately installed and that you wish to keep. Although some low risk programs may track online habits -- as provided for in a privacy policy or End User License Agreement (EULA) -- or display advertising within the applications themselves, these programs have only vague, minimal or negligible effects on your privacy.0

General information:

Malware Name: Multi-Remote Shutdown Manager
Malware Type: Remote Control
Company Name: Eytcheson Software
Company URL: http://eytcheson.com/
Threat Level: Low Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation.

Company Description:

Eytcheson Software provides the following software to its user: Multi-Remote Registry Change v4.0 for Windows NT/2000/XP/2003, Multi-Remote Shutdown Manager v1.0 for Windows NT/2000/XP and Multi-Remote Registry Change v3.1 for Windows 95/98. Multi-Remote Shutdown Manager is a fast, easy and powerful way to shutdown/restart our computers remotely. The trial version is fully functional and allows us to shutdown up to 10 computers at a time. The registered version (only $49 per administrator) allows an unlimited number of computers to be shutdown.

Spyware Description:

Multi-Remote Shutdown Manager is a fast way to shutdown the computers the user administer. It is designed for network administrators working with groups of systems. It includes, Force applications to close, Force reboot after shutdown, Abort an in-progress shutdown. Multi-Remote Shutdown Manager is an easy and fast way to shutdown the computers. It includes Low risk threats are not harm our machine or compromise our privacy and security unless they have been installed without your knowledge and consent. A low risk threat may be a program, network tool, or system utility that you knowingly and deliberately installed and that you wish to keep. Although some low risk programs may track online habits -- as provided for in a privacy policy or End User License Agreement (EULA) -- or display advertising within the applications themselves, these programs have only vague, minimal or negligible effects on your privacy.0

Characteristics/Symptoms:

    -> It is a network application that allows to manage and control PCs or networks from a remote location. -> It allows to access another computer without explicit authorization. -> It can also be used to monitor and steal information from the remote computer -> Slows down the performance of PC0

Additional information might be found here:

google Search at Google for Multi-Remote Shutdown Manager
bing Search at Bing for Multi-Remote Shutdown Manager
yahoo Search at Yahoo for Multi-Remote Shutdown Manager

Processes Running:

MSHUTDOWN.exe

File information Created after Installation:

File Location Size (Bytes) Type
C:\Program Files\Multi-Remote Shutdown Manager\OrderForm.txt 1990 Text Document
C:\Program Files\Multi-Remote Shutdown Manager\README.TXT 5087 Text Document
C:\Program Files\Multi-Remote Shutdown Manager\mshutdown.hlp 141134 Help File

Folder information Created after Installation:

Folder Location

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8E68D826-F2F9-42AA-A1AE-36762C0103E5} VersionMajor
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8E68D826-F2F9-42AA-A1AE-36762C0103E5} VersionMinor
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8E68D826-F2F9-42AA-A1AE-36762C0103E5} WindowsInstaller