Home Malware Programs Remote Administration Tools Net Monitor for Employees

Net Monitor for Employees

Posted: March 28, 2006

Net Monitor for Employees is a commercial remote administration tool designed to monitor users activity on remote PCs. This RAT shows a live picture of a remote PC, provides a control over its keyboard and mouse, allows to send messages and lock a remote PC. Although this application is legitimate, it can be used by malicious persons for obvious harmful deeds. Net Monitor for Employees automatically runs on every Windows startup.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 nlsagent.exe
    2 nlsagentsvc.exe
    3 nlsagtconfig.exe
    4 nlsupervisor.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallNetMonitorforEmployeesConsole_is1HKEY_LOCAL_MACHINESYSTEMControlSet001ServicesNMEmployeesAgentHKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesNMEmployeesAgent
Loading...