McAfee > Theat Center > PUP Detail Page

Characteristics

McAfee(R) AVERT™ recognizes that this program may have legitimate uses in contexts where an authorized administrator has knowingly installed this application. If you agreed to a license agreement for this, or another bundled application, you may have legal obligations with regard to removing this software, or using the host application without this software. Please contact the software vendor for further information.

See http://vil.nai.com/vil/DATReadme.asp for a list of Program detections added to the DATs.

See http://vil.nai.com/vil/pups/configuration.htm for information about how to enable, disable, and exclude detection of legitimately installed programs.

Summary:

This is not a virus or Trojan. It is detected as potentially unwanted program.

The application is designed to monitor and capture the system use. The information gathered includes:

• Typed Keystrokes
• URL’s visited

Upon installation, the application pops up the following window:

All the Keystrokes and the URL’s visited are captured and saved in an encrypted format at the following location:

• %PROGRAMFILES%\PaqTool\keylog

The application gives an option to configure email settings, so that all the recorded logs can be directly sent to the specified email id.

The application also gives an option to configure FTP server information, so that all the recorded logs can be uploaded to a specified FTP site

Privacy:

No license agreement is displayed during installation, although one could be displayed by another installer if bundled with another application. No Privacy policy related to the software could be found.

Installation:

File name: 558fec1e.exe
MD5Hash: 5177512e86af2cfa3179571f2db4f1b7

Following changes occur on the system after installation:

Folders added:

• %PROGRAMFILES%\ PaqTool
• %HOMEDIR%\Documents and Settings\ Start
  Menu\Programs\PaqTool

Files added:

• moni.exe
• icosdll.dll

Removal

Aliases

Aliases

• Monitor.Win32.PaqTool.a - Kaspersky