Advanced VBA Password Recovery

Advanced VBA Password Recovery is a password recovery tool that is used to uncover and display lost or forgotten passwords on a computer or network. The password recovery tool may be used to gain unauthorized access to a computer and to a user's data. It is harmful if installed without the knowledge of the user.0

General information:

Malware Name: Advanced VBA Password Recovery
Malware Type: Password Recovery Tool
Company Name: ElcomSoft
Company URL: http://elcomsoft.com/
Threat Level: Low Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation

Company Description:

ElcomSoft provides you the software Advanced VBA Password Recovery that is a program to recover or remove lost or forgotten passwords to view and edit Visual Basic for Applications (VBA) projects source code in Microsoft Office documents: Word, Excel, Outlook, Project, Access, PowerPoint, and Visio. AVPR can also unlock protected Excel add-ins. In addition, allows to open all documents with VBA projects (not only Microsoft ones) via the backdoor , so no password is needed to view the code (works with all Office components and all other VBA-enabled applications like Corel WordPerfect Office AutoCAD).

Spyware Description:

Advanced VBA Password Recovery is a password recovery tool that is used to uncover and display lost or forgotten passwords on a computer or network. The password recovery tool may be used to gain unauthorized access to a computer and to a user's data. It is harmful if installed without the knowledge of the user.0

Characteristics/Symptoms:

    -> It is harmful if installed without the knowledge of the User. -> It may be used to gain unauthorized access to a computer and to a user's data.0

Additional information might be found here:

google Search at Google for Advanced VBA Password Recovery
bing Search at Bing for Advanced VBA Password Recovery
yahoo Search at Yahoo for Advanced VBA Password Recovery

Processes Running:

avpr.exe

File information Created after Installation:

File Location Size (Bytes) Type
C:\Documents and Settings\[USER]\Start Menu\Programs\Advanced VBA Password Recovery\How to order.lnk 663 Shortcut
C:\Documents and Settings\[USER]\Start Menu\Programs\Advanced VBA Password Recovery\Readme.lnk 670 Shortcut
C:\Documents and Settings\[USER]\Start Menu\Programs\Advanced VBA Password Recovery\Uninstall AVPR.lnk 599 Shortcut

Folder information Created after Installation:

Folder Location
C:\Program Files\ElcomSoft\AVPR

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE \SOFTWARE\ElcomSoft\Advanced VBA Password Recovery InstallDir0
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Advanced VBA Password Recovery DisplayName0
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Advanced VBA Password Recovery [NULL]0