PCSnapShot
PCSnapShot is a spyware that records activity on a computer including chats, instant messages, emails, the web sites visited. It also captures pictures and images posted and looked at, the keystrokes being typed.
General information:
| Malware Name: |
PCSnapShot |
| Malware Type: |
Spyware |
| Company Name: |
PCSnapShot.net |
| Company URL: |
http://pcsnapshot.net/
|
| Threat Level: |
Elevated Risk |
| Operating System: |
WIN XP |
| Installation Type: |
Installed through EXE |
| Operation: |
Time of After Installation |
Company Description:
PCSnapShot.net provides you the software PCSnapShot that is a keylogger that records activity on a computer including chats, instant messages, emails, the web sites visited, what is being searched for, activity on MySpace, the pictures and images
posted and looked at, the keystrokes being typed, the programs started up and much more. And because of its advanced surveillance screen snapshot features, you get to see not only WHAT an end user is doing, but the EXACT order in which they do it,
step by step.
Spyware Description:
PCSnapShot is a spyware that records activity on a computer including chats, instant messages, emails, the web sites visited. It also captures pictures and images posted and looked at, the keystrokes being typed.
Characteristics/Symptoms:
-> It records activity on computer including chats, instant messages, emails, the web sites visited. -> It also captures pictures and images posted and looked at, the keystrokes being typed.
Additional information might be found here:
Processes Running:
PCSSDemo.exe
File information Created after Installation:
| File Location |
Size (Bytes) |
Type |
| C:\Program Files\PCSS Demo\EventScheduler.mdb |
364544 |
Microsoft Office Access Application |
| C:\Program Files\PCSS Demo\Help.rtf |
62922 |
Rich Text Format |
| C:\Program Files\PCSS Demo\Localization.xml |
28538 |
XML Document |
Folder information Created after Installation:
| Folder Location |
| C:\Documents and Settings\[USER]\Application Data\Microsoft\Installer\53A73B62-8EAC-4BC3-BBF5-A6D7367BBB1 |
| C:\Documents and Settings\[USER]\Start Menu\Programs\PCSnapShot.net Software\PCSnapShot Dem |
Registry information Created after Installation:
| Main Registry Key |
Sub Registry Key |
Key Value Name |
| HKEY_CURRENT_USER |
\Software\Microsoft\Installer\Products\26B37A35CAE83CB4BB5F6A7D63B7BB71\SourceList |
LastUsedSource |
| HKEY_CURRENT_USER |
\Software\Microsoft\Installer\Products\26B37A35CAE83CB4BB5F6A7D63B7BB71\SourceList |
PackageName |
| HKEY_CURRENT_USER |
\Software\Microsoft\Installer\Products\26B37A35CAE83CB4BB5F6A7D63B7BB71\SourceList\Media |
|
