WinLock Remote Administrator
WinLock Remote Administrator is a remote control that allows administrators to manage and control PCs or networks from a remote location. The application can be used to gather information from a remote PC on the Network. It is not harmful unless installed
and used without the knowledge of the computer user or network administrator.
General information:
| Malware Name: |
WinLock Remote Administrator |
| Malware Type: |
Remote Control |
| Company Name: |
Crystal Office Systems |
| Company URL: |
http://crystaloffice.com/
|
| Threat Level: |
Low Risk |
| Operating System: |
WIN XP |
| Installation Type: |
Installed through EXE |
| Operation: |
Time of After Installation |
Company Description:
Crystal Office Systems provides you the software WinLock Remote Administrator that is the network security solution for Windows 9x/NT/2000/XP networks. It helps quickly configure remote WinLock and WinLock Professional clients via network, lock remote
workstations, and apply security profiles by means of easy-to-use interface.
Spyware Description:
WinLock Remote Administrator is a remote control that allows administrators to manage and control PCs or networks from a remote location. The application can be used to gather information from a remote PC on the Network. It is not harmful unless installed
and used without the knowledge of the computer user or network administrator.
Characteristics/Symptoms:
-> The application can be used to gather information from a remote PC on the Network. -> It is not harmful unless installed and used without the knowledge of the computer user or network administrator.
Additional information might be found here:
Processes Running:
wradmin.exe
File information Created after Installation:
| File Location |
Size (Bytes) |
Type |
| C:\Documents and Settings\All Users\Start Menu\Programs\WinLock Remote Administrator\Profile Manager.lnk |
503 |
Shortcut |
| C:\Documents and Settings\All Users\Start Menu\Programs\WinLock Remote Administrator\WinLock Remote Administrator Help.lnk |
508 |
Shortcut |
| C:\Documents and Settings\All Users\Start Menu\Programs\WinLock Remote Administrator\WinLock Remote Administrator.lnk |
508 |
Shortcut |
Folder information Created after Installation:
Registry information Created after Installation:
| Main Registry Key |
Sub Registry Key |
Key Value Name |
| HKEY_CURRENT_USER |
\Software\Crystal Office\WRA |
WinW |
| HKEY_CURRENT_USER |
\Software\Crystal Office\WRA\Toolbars |
|
| HKEY_CURRENT_USER |
\Software\Crystal Office\WRA\Toolbars\MainToolbar |
DockRow |
