Home Malware Programs Spyware Watch Right

Watch Right

Posted: March 28, 2006

Watch Right is a legitimate commercial PC surveillance application that captures online chat conversations and instant messages, records received and sent e-mails, logs web sites visited and monitors message board postings. Watch Right must be manually installed. The application can be protected with a password. It is able to prevent its removal. Watch Right runs on every Windows startup.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 bpscomm.dll
    2 bpssi1.exe
    3 dwsbc36.ocx
    4 dwshk36.ocx
    5 dwspy36.dll
    6 wrclock.exe
    7 wrexec.exe
    8 wrie.dll
    9 wrmont.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CLASSES_ROOTwrie.clsIEWRHKEY_CURRENT_USERSoftwareBPSSoftWareWatchRightHKEY_LOCAL_MACHINESOFTWAREBPSSoftWareWatchRightHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunwrexecHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallWatchRight
  • The following CLSID's were detected:
    HKEY..\..\{CLSID Path}38D5592B-1B6F-4F9B-9879-58B696405AC1
Loading...