RoboNanny

RoboNanny is a program that logs keystrokes and monitors the user without his/her knowledge. SnapKey runs in the background completely undetectable and monitors all computer activity. It can be accessed from a remote location0

General information:

Malware Name: RoboNanny
Malware Type: Key Logger
Company Name: Pingram Marketing
Company URL: http://www.pingram.com/
Threat Level: Elevated Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation

Company Description:

Pingram Marketing provides you the software RoboNanny that is a computer home security and baby monitor software. It monitors sound level in your room via your computer microphone, broadcasts audio from the microphone over the network, and records surrounding audio, and fires sound alarms.

Spyware Description:

RoboNanny is a program that logs keystrokes and monitors the user without his/her knowledge. SnapKey runs in the background completely undetectable and monitors all computer activity. It can be accessed from a remote location0

Characteristics/Symptoms:

    -> It can even steal the password. -> It is usually hidden from the user. -> It captures and logs keystrokes on the computer without the user's knowledge and consent. -> The logged data may be encrypted and is typically sent to a remote attacker.0

Additional information might be found here:

google Search at Google for RoboNanny
bing Search at Bing for RoboNanny
yahoo Search at Yahoo for RoboNanny

Processes Running:

RoboNanny.exe

File information Created after Installation:

File Location Size (Bytes) Type
C:\Documents and Settings\All Users\Start Menu\Programs\RoboNanny\Uninstall RoboNanny.lnk 539 Shortcut
C:\Program Files\RoboNanny\NetWrite.dll 212992 Application Extension
C:\Program Files\RoboNanny\RoboNanny.exe.manifest 757 MANIFEST File

Folder information Created after Installation:

Folder Location
C:\Program Files\RoboNanny

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindowsCurrentVersionUninstallRoboNanny DisplayName
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindowsCurrentVersionUninstallRoboNanny UninstallString
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RoboNanny