Spyware.HiddenRecorder

Updated: February 13, 2007 11:45:03 AM

Type: Spyware

Version: 1.6

Publisher: Oleansoft

Risk Impact: Medium

File Names: HR.exe hr_setup.exe

Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

When Spyware.HiddenRecorder is installed, it does the following:

Creates the following files:
- %UserProfile%\Desktop\hr_setup.exe
- %ProgramFiles%\Oleansoft\HR\Archive\Readme.txt
- %ProgramFiles%\Oleansoft\HR\HR.EXE
- %ProgramFiles%\Oleansoft\HR\HRHELP.CHM
- %ProgramFiles%\Oleansoft\HR\License.txt
- %ProgramFiles%\Oleansoft\HR\Uninstal.exe
- %Windir%\system\Winhr15.dll
- %Windir%\hrdir.ini
  
  Note:
- %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.
- %UserProfile% is a variable that refers to the current user's profile folder. By default, this is C:\Documents and Settings\[Current User] (Windows NT/2000/XP).
- %ProgramFiles% is a variable that refers to the program files folder. By default, this is C:\Program Files.
Creates the following registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Hidden Recorder
Adds the value:

"HR" = "C:\Program Files\Oleansoft\HR\Hr.exe"

to the registry subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

to ensure the programs runs on windows startup.

Summary

Search Threats

Search by name

_{Example: W32.Beagle.AG@mm}