Home Malware Programs Spyware Hidden Recorder

Hidden Recorder

Posted: March 28, 2006

Hidden Recorder takes screenshots of user activity at the predefined time intervals. The application runs on every Windows startup and hides from the user, so it is classified as a malware. However, it is a legitimate product, which still can be successfully used by hackers. Hidden Recorder must be manually installed. It comes with the uninstaller.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 hr.exe
    2 hr_setup.exe
    3 hrdir.ini
    4 uninstall.exe
    5 winhr15.dll

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunHR=C:ProgramFilesOleansoftHRhr.exeHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallHiddenRecorder
Loading...