RemoteExec
RemoteExec® is a very powerful tool for remotely execute the same program simultaneously on multiple computers, without requiring preinstalled agents on target machines. RemoteExec also helps in Remote shutdown, reboot and logoff scheduler.0
General information:
Malware Name: |
RemoteExec |
Malware Type: |
Remote Control |
Company Name: |
ISDecisions |
Company URL: |
http://www.isdecisions.com/
|
Threat Level: |
Low Risk |
Operating System: |
WIN XP |
Installation Type: |
Installed through EXE |
Operation: |
Time of After Installation |
Company Description:
IS Decisions, founded in 2000 and based in Biarritz (France), is a software editor specializing in Security and Change Management solutions for Microsoft« Windows« infrastructures. The software solutions developed by IS Decisions:
are used worldwide and on a daily basis by more than 1,300 clients of all sizes and in all business sectors.It provide security by providing network administrators with the tools necessary for proactive system auditing and analysis, enhanced patch
/ application / data deployment and system action, network access security, management and reporting,sensitive data and process monitoring and enhanced alert triggering.
Spyware Description:
RemoteExec® is a very powerful tool for remotely execute the same program simultaneously on multiple computers, without requiring preinstalled agents on target machines. RemoteExec also helps in Remote shutdown, reboot and logoff scheduler.0
Characteristics/Symptoms:
-> It is a network application that allows to manage and control PCs or networks from a remote location. -> It allows to access another computer without explicit authorization. -> It can also be used to monitor and steal information
from the remote computer -> Slows down the performance of PC0
Additional information might be found here:
Processes Running:
File information Created after Installation:
File Location |
Size (Bytes) |
Type |
C:\Documents and Settings\All Users\Start Menu\Programs\RemoteExec\RemoteExec.lnk |
752 |
Shortcut |
C:\Documents and Settings\All Users\Start Menu\Programs\RemoteExec\Uninstall RemoteExec.lnk |
655 |
Shortcut |
C:\Documents and Settings\All Users\Start Menu\Programs\RemoteExec\XP SP2 firewall configuration.lnk |
772 |
Shortcut |
Folder information Created after Installation:
Folder Location |
C:\Program Files\ISDecisions\RemoteExec\Logs |
Registry information Created after Installation:
Main Registry Key |
Sub Registry Key |
Key Value Name |
HKEY_LOCAL_MACHINE |
\SOFTWARE\ISDecisions\RemoteExec |
MaxServerShares |
HKEY_LOCAL_MACHINE |
\SOFTWARE\ISDecisions\RemoteExec |
NbLogToKeep |
HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RemoteExec |
URLInfoAbout |