Advanced VBA Password Recovery

Advanced VBA Password Recovery is a password recovery tool that is used to uncover and display lost or forgotten passwords on a computer or network. The password recovery tool may be used to gain unauthorized access to a computer and to a user's data. It is harmful if installed without the knowledge of the user.0

General information:

Malware Name:Advanced VBA Password Recovery
Malware Type:Password Recovery Tool
Company Name:ElcomSoft
Company URL:http://elcomsoft.com/
Threat Level:Low Risk
Operating System:WIN XP
Installation Type:Installed through EXE
Operation:Time of After Installation

Company Description:

ElcomSoft provides you the software Advanced VBA Password Recovery that is a program to recover or remove lost or forgotten passwords to view and edit Visual Basic for Applications (VBA) projects source code in Microsoft Office documents: Word, Excel, Outlook, Project, Access, PowerPoint, and Visio. AVPR can also unlock protected Excel add-ins. In addition, allows to open all documents with VBA projects (not only Microsoft ones) via the backdoor , so no password is needed to view the code (works with all Office components and all other VBA-enabled applications like Corel WordPerfect Office AutoCAD).

Spyware Description:

Advanced VBA Password Recovery is a password recovery tool that is used to uncover and display lost or forgotten passwords on a computer or network. The password recovery tool may be used to gain unauthorized access to a computer and to a user's data. It is harmful if installed without the knowledge of the user.0

Characteristics/Symptoms:

    -> It is harmful if installed without the knowledge of the User. -> It may be used to gain unauthorized access to a computer and to a user's data.0

Additional information might be found here:

googleSearch at Google for Advanced VBA Password Recovery
bingSearch at Bing for Advanced VBA Password Recovery
yahooSearch at Yahoo for Advanced VBA Password Recovery

Processes Running:

avpr.exe

File information Created after Installation:

File LocationSize (Bytes)Type
C:\Documents and Settings\[USER]\Start Menu\Programs\Advanced VBA Password Recovery\How to order.lnk663Shortcut
C:\Documents and Settings\[USER]\Start Menu\Programs\Advanced VBA Password Recovery\Readme.lnk670Shortcut
C:\Documents and Settings\[USER]\Start Menu\Programs\Advanced VBA Password Recovery\Uninstall AVPR.lnk599Shortcut

Folder information Created after Installation:

Folder Location
C:\Program Files\ElcomSoft\AVPR

Registry information Created after Installation:

Main Registry KeySub Registry KeyKey Value Name
HKEY_LOCAL_MACHINE\SOFTWARE\ElcomSoft\Advanced VBA Password RecoveryInstallDir0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Advanced VBA Password RecoveryDisplayName0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Advanced VBA Password Recovery[NULL]0