I installed AVAST on my friends laptop. And she moved away. She let a friend of a friend use her laptop and that person installed Spector Pro on her laptop without her knowledge. Spector Pro being a keylogging/computer monitoring software. Why doesn’t Avast scan for this sort of thing? This is perhaps the most malicious software ever invented. Did Spector disable avast to install? Or was it just not a problem at all? I have told my friend to create a guest account on her laptop from now on so people can’t install programs. Does anyone else has suggestions to how to prevent monitoring software from being installed?
A request I really hope to see in Avast to help prevent something like this is have the user enter a password on installation. Then everytime someone or something tries to disable Avast, they would have to input a password. I’m not talking about the administrator password as part of windows, but a password specifically for Avast.
Hi applered,
As it was wilfully installed or excluded it may have landed on the computer.
To you now it is an unwanted keylogger. We call this a Possibly Unwanted Program or PUP,
it has to go from the computer if you yourself haven’t installed that knowingly!
Spyware.Spector is a malicious spyware program with backdoor functionalities.
Spyware.Spector is able to open a backdoor into an infected system,
giving remote attackers access and control over the system.
Additionally, Spyware.Spector allows other harmful malware to be downloaded onto a compromised.
Spyware.Spector also has keylogger functionalities, enabling it to log a victim’s keystrokes and steal sensitive information such as online banking passwords.
Threat level: High
Here is the manual removal routine:
Remove the “Spector” processes files in Task Manager:
winnetcl.exe
webebot.exe
, winnetcl.exe
webebot.exe
Search and unregister “Spector” DLL files:
netknlhm.dll
netknl.dll
Detect and Delete Other Spector Files:
winnetcl.hlp
winnetcl.cnt
599ca53a.tmp
_msfilea.txt
netknlhm.dll
netknl.dll
winnetcl.exe
webebot.exe
_msfilea.txt
from their page: http://www.spectorsoft.com/support/SpectorPro_windows/faq.html
polonus