Watch Right

Watch Right is a simple and inexpensive parental monitoring system that empowers the concerned parent with the ability to 'keep an eye' on their child's online activities. Automatically log child's AOL and AIM instant messages, AOL chatroom conversations, email messages, message board postings, and web sites they visit while online. Works invisibly in the background and resists tampering attempts. It also includes elevated threats that are typically installed without adequate notice and consent, and may make unwanted changes to system, such as reconfiguring browser’s homepage and search settings. These threats may install advertising-related add-ons, including toolbars and search bars, or insert advertising-related components into the Winsock Layered Service Provider chain.0

General information:

Malware Name: Watch Right
Malware Type: Key Logger
Company Name: Watch Right
Company URL: http://www.watchright.com/
Threat Level: Elevated Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation.

Company Description:

Watch Right is designed to monitor AOL or AIM or both simultaneously. The software is easy to install, easy to use, and does not require technical sophistication. Parents use Watch Right to monitor the behavior of their children on the Internet. Businesses use Watch Right to log the AOL Instant Messenger (AIM) in the enterprise. Watch Right is also used for online surveillance and investigation. Watch Right logs all interaction and saves the interactions in their entirety. The Watch Right logging system contains the same software technology used in our award winning PowerTools software.

Spyware Description:

Watch Right is a simple and inexpensive parental monitoring system that empowers the concerned parent with the ability to 'keep an eye' on their child's online activities. Automatically log child's AOL and AIM instant messages, AOL chatroom conversations, email messages, message board postings, and web sites they visit while online. Works invisibly in the background and resists tampering attempts. It also includes elevated threats that are typically installed without adequate notice and consent, and may make unwanted changes to system, such as reconfiguring browser’s homepage and search settings. These threats may install advertising-related add-ons, including toolbars and search bars, or insert advertising-related components into the Winsock Layered Service Provider chain.0

Characteristics/Symptoms:

    -> Monitor and capture data from computers -> Run in stealth mode -> Intercepts keystrokes from the keyboard and records them in a log -> Starts with the operating system0

Additional information might be found here:

google Search at Google for Watch Right
bing Search at Bing for Watch Right
yahoo Search at Yahoo for Watch Right

Processes Running:

wrclock.exe

File information Created after Installation:

File Location Size (Bytes) Type
C:\Program Files\Watch Right\BPSSI1.exe 90112 Application
C:\Program Files\Watch Right\bpscomm.dll 12800 Application Extension
C:\Program Files\Watch Right\pad_file.xml 7602 XML Document

Folder information Created after Installation:

Folder Location
C:\Program Files\Watch Right
C:\Program Files\Watch Right\BACKUP

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindowsCurrentVersionUninstallWatch Right DisplayName
HKEY_LOCAL_MACHINE \SOFTWARE\BPS SoftWare\Watch Right\Watch Right Main Width
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Watch Right UninstallString