IMMonitor Description

IMMonitor is a network surveillance program designed to stealthily steal Yahoo Messenger’s communication packets. IMMonitor can either block or record all conversations on a local network. In addition, IMMonitor may save the logged data as an HTML file. IMMonitor is a serious threat to the network on which it is installed.

Type: Spyware

How Can You Detect IMMonitor?

IMMonitor Technical Report

As new IMMonitor details are reported by our customers and findings from our Threat Research Center, we will update this section.

The following IMMonitor files with its MD5s were created in the system:

IMMonitor has typically the following processes in memory:

• IMMonitor.exe

IMMonitor created the following directories, files, paths:

• %ProgramFiles%\IMFirewall\IMMonitor

IMMonitor creates the following registry entries:

• Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\IMMonitor

Important Article Disclaimer