Home Malware Programs Keyloggers Exploit Child Watchdog

Exploit Child Watchdog

Posted: March 28, 2006

Exploit Child Watchdog is a commercial PC monitoring application that tracks user activity, logs all keystrokes, takes screenshots and records addresses of visited web sites. Gathered data is saved to a hard disk. The software must be manually installed. Exploit Child Watchdog automatically runs on every Windows startup.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 ecwdinst.exe
    2 eitcwd.exe
    3 eitwmon.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USERSoftwareExploitInformationTechnologyLimitedCWDHKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerMenuOrderStartMenu2ProgramsExploitHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallExploitChildWatchdogHKEY_LOCAL_MACHINESOFTWARENelco6C34460953145150530E1033486E3F5B0C41267C4B530D
  • The following CLSID's were detected:
    HKEY..\..\{CLSID Path}71A2702D-C7D8-11D2-BEF8-525400DFB47A608009F3-E1FB-11D2-9BA1-0040D0002C80543749C9-8732-11D3-A204-0090275C8BC1396F7AC0-A0DD-11D3-93EC-00C0DFE7442A15138B51-7EB6-11D0-9BB7-0000C0F04C96F94F4020-B035-11D0-A853-0000C02AC6DBEB61DB30-B032-11D0-A853-0000C02AC6DBCDA1CA04-8B5D-11D0-9BC0-0000C0F04C96CDA1CA02-8B5D-11D0-9BC0-0000C0F04C96CDA1CA00-8B5D-11D0-9BC0-0000C0F04C9671A27036-C7D8-11D2-BEF8-525400DFB47A71A27033-C7D8-11D2-BEF8-525400DFB47A71A27031-C7D8-11D2-BEF8-525400DFB47A71A2702E-C7D8-11D2-BEF8-525400DFB47A6B976287-3692-11D0-9B8A-0000C0F04C966B976285-3692-11D0-9B8A-0000C0F04C9660800A01-E1FB-11D2-9BA1-0040D0002C80608009FF-E1FB-11D2-9BA1-0040D0002C80608009F7-E1FB-11D2-9BA1-0040D0002C80608009F6-E1FB-11D2-9BA1-0040D0002C80608009F4-E1FB-11D2-9BA1-0040D0002C80543749E9-8732-11D3-A204-0090275C8BC1543749E8-8732-11D3-A204-0090275C8BC1543749E1-8732-11D3-A204-0090275C8BC1543749DB-8732-11D3-A204-0090275C8BC1396F7AD4-A0DD-11D3-93EC-00C0DFE7442A396F7AD0-A0DD-11D3-93EC-00C0DFE7442A396F7ACE-A0DD-11D3-93EC-00C0DFE7442A396F7AC8-A0DD-11D3-93EC-00C0DFE7442A2CB22247-89B8-11D0-9BC0-0000C0F04C962CB22245-89B8-11D0-9BC0-0000C0F04C962CB22242-89B8-11D0-9BC0-0000C0F04C962CB22240-89B8-11D0-9BC0-0000C0F04C9615138B53-7EB6-11D0-9BB7-0000C0F04C9615138B52-7EB6-11D0-9BB7-0000C0F04C9615138B50-7EB6-11D0-9BB7-0000C0F04C9671A27034-C7D8-11D2-BEF8-525400DFB47A71A27032-C7D8-11D2-BEF8-525400DFB47A71A2702F-C7D8-11D2-BEF8-525400DFB47A60800A02-E1FB-11D2-9BA1-0040D0002C8060800A00-E1FB-11D2-9BA1-0040D0002C80608009F8-E1FB-11D2-9BA1-0040D0002C80608009F5-E1FB-11D2-9BA1-0040D0002C80543749EA-8732-11D3-A204-0090275C8BC1543749E2-8732-11D3-A204-0090275C8BC1543749DC-8732-11D3-A204-0090275C8BC1396F7AD5-A0DD-11D3-93EC-00C0DFE7442A396F7AD1-A0DD-11D3-93EC-00C0DFE7442A396F7AC9-A0DD-11D3-93EC-00C0DFE7442A15138B54-7EB6-11D0-9BB7-0000C0F04C96
Loading...