Updated: February 13, 2007 11:38:05 AM
Type: Spyware
Version: 3.00
Publisher: GlobalPatrol
Risk Impact: High
File Names:
svcagnt.exe
dtsview.exe
dtsview.dll
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
When Spyware.DesktopScout is installed, it performs the following actions:
- Creates the following files:
- %ProgramFiles%\Desktop Scout 3\svcagnt.exe
- %ProgramFiles%\Desktop Scout 3\dtsview.exe
- %ProgramFiles%\Desktop Scout 3\dtsview.dll
- %ProgramFiles%\Desktop Scout 3\unins000.exe
Note: %ProgramFiles% is a variable that refers to the path to the program files folder. By default, this is C:\Program Files.
- Adds the following registry subkeys:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Desktop Scout 3_is1
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\dtsagntsvc
HKEY_LOCAL_MACHINE\Software\GlobalPatrol\Desktop Scout 3
- On Windows NT/2000/XP computers, registers Svcagnt.exe as a service named "Windows Desktop Security."
- Can run in stealth mode and listens on TCP port 7250 for remote commands.
Technorati
Digg
Delicious
Reddit
StumbleUpon
Yahoo Buzz
Twitter
Facebook
Newsvine
