Home Malware Programs Keyloggers NetVizor

NetVizor

Posted: March 28, 2006

ScreenshotNetVizor is a keylogger program that records keystrokes made on your computer at anytime. NetVizor, once installed, starts to record your internet activity and take screen shots of your desktop only to send this information to a unauthorized remote user. NetVizor is a serious threat to your personal security and identity. NetVizor should be removed as soon as possible.


Screenshot

File System Modifications

  • The following files were created in the system:
    # File Name File Size (bytes) File Hash
    1 imgscii32.dll N/A N/A
    2 NetDeploy.exe 30,600 aa3db003a5c414d407c97b9a86200777
    3 NetVizor Help Documentation.url N/A N/A
    4 NetVizor Viewer.lnk N/A N/A
    5 NetVizorViewer.exe 861,723 631b8acda714836729b1f9049dee88b2
    6 Purchase NetVizor Online!!.lnk N/A N/A
    7 Purchase NetVizor Online!!.url N/A N/A
    8 Remove NetVizor.lnk N/A N/A
    9 Remover.exe 22,016 c2e793ca6ab27b5ef61b61f8f7e387a6
    10 services.exe 41,301 49a64a618fa4abc089a468a8eeba683e
    11 sinvfct.dll 40,074 8c6c7993f8777b055fc7209d3a96daa8
    12 spcinvis.dll 49,152 5df71117a1ded74d159d7f2e9463526e
    13 Srv32Win N/A N/A
    14 svchost.exe 48,087 f646cb69184b0b6dbdef16c62227aea3
    15 sysdiag.exe 624,652 941a4010bf5e04a36bcce7e2f482cea0
    16 systemsa32n.dll N/A N/A
    17 yahoodll.dll N/A N/A

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunsrv32win

Additional Information on NetVizor

  • The following paths were detected:
    # Path
    1 %ProgramFiles%\NetVizor
    2 %ProgramFiles%\nvclient

Related Posts

Loading...