Signature Detail

SPYWARE: NETObserve

This signature detects the runtime behavior of spyware NETObserve. NETObserve allows a hacker to secretly record user activities on a PC. The main functions include: log all chat conversations, log all Web site activity, monitor clipboard activity, monitor all print activity, log all applications ran, log all window activity, log all keystrokes, and screen capture. NETObserve can also send an notification e-mail and allow a remote user to view all the information through http service.

References

• URL: http://www.spywareguide.com/product_show.php?id=354
• URL: http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453073490
• URL: http://www.symantec.com/security_response/writeup.jsp?docid=2003-080714-2809-99