|
RemEye Spyware Information
| Name: |
RemEye |
| Category: |
Spyware |
| Advice: |
Remove |
| Risk: |
Elevated Risk
Elevated threats are usually threats that fall into the range of adware in which data about a user's habits are tracked and sent back to a server for analysis without your consent or knowledge. |
| Description:
|
RemEye is an console application that silently installs WinVNC server. It can be used as an easy to use installer for a really good administration tool or even better trojan
RemEye is really simple to use. To install WinVNC just run "remeye.exe".
If you wanna uninstall WinVNC server from the computer run "remeye.exe" with "-remove" parameter.
Usage example:
You can telnet over remote computer. Execute "remeye.exe". Run vncviewer.exe.
Connect to remote computer. Type default password - "abcd",
and from this moment you have totally control over computer.
[What is VNC?]
"(..) VNC stands for Virtual Network Computing. It is, in essence,
a remote display system which allows you to view a computing 'desktop' environment
not only on the machine where it is running, but from anywhere on the Internet
and from a wide variety of machine architectures (..)" - VNC website
|
| Signatures:
|
process: remeye.exe: MD5 Hash: eec1164c749f14b314e...
process: WINVNC.EXE: MD5 Hash: .. |
| Type: |
Spyware - A Trojan software is any software on a user's computer that the user is not aware or intentionally installed. Most Trojan software is designed to perform some sort of actions that could jeopardize the user's security or privacy. |
Top Spyware Visited Pages:
IEPlugin - Alias: IMIServer IEPlugin, Webplugin, BHO3Lib, ExplWWW, IExpl, MimarSinan, Win Server, winobject, TrojanDow - 80 visits
webHancer - Alias: Customer Companion, Webhancer Customer Companion, SpeedRank - 51 visits
Spyware.SearchAssistant - Alias: Troj/StartPa-EI - 48 visits
007.msnnames - Alias: access.ocx, jokes.ocx, StopLiteCtrl, StopLite, 007installer - 43 visits
PowerReg Scheduler - 40 visits
Aureate - Alias: Aureate Spy, Radiate - 38 visits
VX2.LocalNRD - Alias: LocalNRD - 37 visits
CWS.Cassandra - 34 visits
C2.Lop - Alias: C2 Media, Lop, LopAdvert, MP3Search, MpAdvert, TrojanClicker.Win32.Rotarran - 33 visits
Stealth Web Page Recorder v. 1.1 - 31 visits
Random Spyware Pages:
Unclassified.Trojan.H
ReplaceSearch - Alias: Replace Search
IeHook
Ramdud.BHO
Startup.AutoLoader
Spyware.PolyFilter - Alias: sikernel
IE.MarketDart
TrustyHound - Alias: FunnyTaf, TrustyHound-TS
StartSurfing
SavingBot Shopper
|