Spyware.ChatBlocker

Printer Friendly Page

Updated: February 13, 2007 11:43:33 AM

Type: Spyware

Version: 2.2.1

Publisher: ExploreAnywhere Software

Risk Impact: Medium

File Names: chatblocker-setup-sw.exe ChatBlocker.exe cbphook.dll cbsys32.dll winsscap.dll

Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP

When Spyware.ChatBlocker is installed, the following actions are performed:

Creates the following files:
- %Userprofile%\Start Menu\Programs\ChatBlocker\ChatBlocker Documentation.lnk
- %Userprofile%\Start Menu\Programs\ChatBlocker\ChatBlocker.lnk
- %Userprofile%\Start Menu\Programs\ChatBlocker\License Agreement.lnk
- %Userprofile%\Start Menu\Programs\ChatBlocker\Purchase ChatBlocker Now!.lnk
- %Userprofile%\Start Menu\Programs\ChatBlocker\Readme.lnk
- %Userprofile%\Start Menu\Programs\ChatBlocker\Remove ChatBlocker.lnk
- %Userprofile%\Start Menu\Programs\ChatBlocker\Visit ExploreAnywhere Software Online.lnk
- %ProgramFiles%\ExploreAnywhere\ChatBlocker\ChatBlocker.exe
- %ProgramFiles%\ExploreAnywhere\ChatBlocker\help\alert.htm
- %ProgramFiles%\ExploreAnywhere\ChatBlocker\help\applog.htm
- %ProgramFiles%\ExploreAnywhere\ChatBlocker\help\chatattemptlog.htm
- %ProgramFiles%\ExploreAnywhere\ChatBlocker\help\contents.htm
- %ProgramFiles%\ExploreAnywhere\ChatBlocker\help\convolog.htm
- %ProgramFiles%\ExploreAnywhere\ChatBlocker\help\cp_removal.htm
- %ProgramFiles%\ExploreAnywhere\ChatBlocker\help\email-overview.htm
- %ProgramFiles%\ExploreAnywhere\ChatBlocker\help\email-smtp.htm
- %ProgramFiles%\ExploreAnywhere\ChatBlocker\help\export.htm
- %ProgramFiles%\ExploreAnywhere\ChatBlocker\help\faq.htm
- %ProgramFiles%\ExploreAnywhere\ChatBlocker\help\frames.htm
- %ProgramFiles%\ExploreAnywhere\ChatBlocker\help\header.gif
- %ProgramFiles%\ExploreAnywhere\ChatBlocker\help\purchase.htm
- %ProgramFiles%\ExploreAnywhere\ChatBlocker\help\pwconfig.htm
- %ProgramFiles%\ExploreAnywhere\ChatBlocker\help\schedule.htm
- %ProgramFiles%\ExploreAnywhere\ChatBlocker\help\security.htm
- %ProgramFiles%\ExploreAnywhere\ChatBlocker\help\startup_param.htm
- %ProgramFiles%\ExploreAnywhere\ChatBlocker\help\stealth_tips.htm
- %ProgramFiles%\ExploreAnywhere\ChatBlocker\help\support.htm
- %ProgramFiles%\ExploreAnywhere\ChatBlocker\help\thread.htm
- %ProgramFiles%\ExploreAnywhere\ChatBlocker\help\TMP9bbjq750w4.htm
- %ProgramFiles%\ExploreAnywhere\ChatBlocker\help\welcome.htm
- %ProgramFiles%\ExploreAnywhere\ChatBlocker\help\winstart.htm
- %ProgramFiles%\ExploreAnywhere\ChatBlocker\help.htm
- %ProgramFiles%\ExploreAnywhere\ChatBlocker\license.txt
- %ProgramFiles%\ExploreAnywhere\ChatBlocker\Purchase ChatBlocker Now!.url
- %ProgramFiles%\ExploreAnywhere\ChatBlocker\Readme.txt
- %ProgramFiles%\ExploreAnywhere\ChatBlocker\uninstal.log
- %ProgramFiles%\ExploreAnywhere\ChatBlocker\Visit ExploreAnywhere Software Website.url
- %Windir%\cbconfig.dat
- %Windir%\cblog.dat
- %Windir%\cbmsg.dat
- %Windir%\cbphook.dll
- %Windir%\cbsys32.dll
- %Windir%\cbtril32.dll
- %Windir%\unvise32.exe
- %Windir%\vmlmod.dll
- %Windir%\winsscap.dll
  
  Notes:
- %UserProfile% is a variable that refers to the current user's profile folder. By default, this is C:\Documents and Settings\<Current User> (Windows NT/2000/XP).
- %ProgramFiles% is a variable that refers to the program files folder. By default, this is C:\Program Files.
- %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.
Creates the following registry keys:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ChatBlocker HKEY_LOCAL_MACHINE\SOFTWARE\ExploreAnywhere Software\CB
Records online chat conversations and blocks applications

Removal

Summary

Search Threats

Search by name

_{Example: W32.Beagle.AG@mm}