XpressRemote
XpressRemote is a remote control that allows administrators to manage and control PCs or networks from a remote location. The application can be used to gather information from a remote PC on the Network. It is not harmful unless installed and used
without the knowledge of the computer user or network administrator.
General information:
| Malware Name: |
XpressRemote |
| Malware Type: |
Remote Control |
| Company Name: |
SoftExpress |
| Company URL: |
|
| Threat Level: |
Low Risk |
| Operating System: |
WIN XP |
| Installation Type: |
Installed through EXE |
| Operation: |
Time of After Installation |
Company Description:
SoftExpress provides you the software XpressRemote that is a remote monitoring and control program allowing users to work with one or more networked computers as if they were sitting in front of them. It is the newest and the most innovative package
in the BizDefender suite allowing remote and direct control over the networked computer s desktop. With this small solution you can control by mouse and keyboard any remote computer just as if you were sitting in front of its screen.
Spyware Description:
XpressRemote is a remote control that allows administrators to manage and control PCs or networks from a remote location. The application can be used to gather information from a remote PC on the Network. It is not harmful unless installed and used
without the knowledge of the computer user or network administrator.
Characteristics/Symptoms:
-> The application can be used to gather information from a remote PC on the Network. -> It is not harmful unless installed and used without the knowledge of the computer user or network administrator.
Additional information might be found here:
Processes Running:
XRserver.exe
File information Created after Installation:
| File Location |
Size (Bytes) |
Type |
| C:\Documents and Settings\[USER]\Start Menu\Programs\XpressRemote Server\Server.lnk |
675 |
Shortcut |
| C:\Documents and Settings\[USER]\Start Menu\Programs\XpressRemote Server\Uninstall.lnk |
593 |
Shortcut |
| C:\Documents and Settings\[USER]\Start Menu\Programs\XpressRemote Server\Website.lnk |
740 |
Shortcut |
Folder information Created after Installation:
| Folder Location |
| C:\Documents and Settings\[USER]\Start Menu\Programs\XpressRemote Serve |
| C:\Program Files\XpressRemote Server\Hel |
Registry information Created after Installation:
| Main Registry Key |
Sub Registry Key |
Key Value Name |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\XpressRemote Server |
DisplayVersion |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\XpressRemote Server |
Publisher |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\XpressRemote Server |
UninstallString |
