Home Malware Programs Malware NetRatings

NetRatings

Posted: March 28, 2006

NetRatings is a malware application that tracks user Internet activity and transfers gathered information to a predetermined remote server. The threat doesn't carry any destructive payload. NetRatings can get into the computer while visiting certain web sites. The user must agree to the installation. NetRatings can also be accidentally installed by running a particular file. The malware automatically runs on every Windows startup.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 netmeter.exe
    2 netratings.exe
    3 nrpr.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINEHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunNetMeterHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunPremeterHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallPremeter
Loading...