RE: Spy Software

["Clark, Steve" <Steve () clarksupport com>]

I use the program for several shops - it is installed locally and puts the
data files in the directory as you indicated. However, the EXE/ DLL's are
hidden upon installation and run in stealth mode to not show up in Task Mgr.

If you can and use your registration code - they will give you exact
information on configuring the timed snapshot as well as install info. If
you're the user and are trying to remove or modify the install - don't
bother.

regards,

Steve Clark 
Clark Systems Support, LLC 
AVI-EWS Charter Member 
"Who's watching your network?" 
www.clarksupport.com 

          301-610-9584 voice 
          240-465-0323 Efax 

Your Referral Resource

The data furnished in connection with this document is deemed by  Clark
Systems Support, LLC., to contain proprietary and privileged information and
shall not be disclosed or used for the benefit of others without the prior
written permission of Clark Systems Support, LLC.


-----Original Message-----
From: Richard Pachito [mailto:alpyha () prodigy net] 
Sent: Thursday, April 10, 2003 7:35 PM
To: security-basics () securityfocus com
Subject: Spy Software

Hello, I administer workstations for a small company and the boss recently
asked me to isntall sofware called "Spector Pro".  It is a 'spy' utility
that captures keystrokes, e-mails, instant-messages (YIM,AIM,ICQ), and takes
screen shots every X amount of time.

What I was wondering is how exactly does this program hide itself in the
system.  I've called their techs a few times to end with a repsonse of 'we
are not authorized to disclose such information'.

The recorded data is saved in a C:\winnt\system32\netext\ folder but no
exec.  There is nothing unusual listed in Task Manager that would lead me to
the application running in the background.  Would anyone happen to know how
exactly this application works.  I believe a user would have the right to
know what is running on their system, and I'm kinda ticked off that Spector
Soft denys such information.


-------------------------------------------------------------------
Is SPAM over-loading your e-mail server, disk space or bandwidth?
SurfControl E-Mail Filter is flexible, intelligent and policy-driven
protection.
http://www.securityfocus.com/SurfControl-security-basics2
Download your free fully functional trial, complete with 30-days of free
technical support.
Stop SPAM before it stops you.
-------------------------------------------------------------------

-------------------------------------------------------------------
Is SPAM over-loading your e-mail server, disk space or bandwidth?
SurfControl E-Mail Filter is flexible, intelligent and policy-driven
protection.
http://www.securityfocus.com/SurfControl-security-basics2
Download your free fully functional trial, complete with 30-days of free technical support.
Stop SPAM before it stops you.
-------------------------------------------------------------------