Spyware.Pcaudit ?

[Kaupp]

-{ Quote: "
Type: Spyware
Name: pcAudit
Version: 1.0.0.2
Publisher: Internet Security Alliance, LLC
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
Risk Impact: High
" }-

http://www.symantec.com/avcenter/venc/data/spyware.pcaudit.html


I thought pcAudit was legit?

[aka:snowman]

File names: pcaudit.exe

When Spyware.Pcaudit is executed, it performs the following actions:


Displays a graphical user interface named pcAudit Leak Test.


With the user's permission, the spyware tracks and sends the following information to the server of Internet Security Alliance:

Computer name or any identification
IP address
Name of the subdirectories and files in the My Documents folder
Snapshot of the computer's screen
Keystrokes

________________________________________________________________



Just gotta wonder how many thousands of people were burnt by this one........................

[aka:snowman]

Hmmmmmmmm...........does anyone recall seeing someone post that their anti virus or anti trojan programs picked up this exploit ?

[nicM]

-{ Quote: "Hmmmmmmmm...........does anyone recall seeing someone post that their anti virus or anti trojan programs picked up this exploit ?" }-

McAfee does (PUP), and Panda does too. You've to exclude the file to run the test, or to disable resident guard :-\ .