Passware Kit

Passware Kit is a password recovery tool that is used to uncover and display lost or forgotten passwords on a computer or network. The password recovery tool may be used to gain unauthorized access to user s data. It is harmful if installed without the knowledge of the user.

General information:

Malware Name:Passware Kit
Malware Type:Password Recovery Tool
Company Name:Passware
Company URL:http://www.lostpassword.com/
Threat Level:Low Risk
Operating System:WIN XP
Installation Type:Installed through EXE
Operation:Time of After Installation

Company Description:

Passware provides you the software Passware Kit that recovers all kinds of passwords for the world s most popular office application files, including Excel, Word, WinZip, Windows XP/2000/NT, Access, Outlook, Quicken, WordPerfect, VBA, 1-2-3, ACT!, Paradox, Organizer, Schedule, WordPro and more. Passware Kit combines over 25 password recovery modules in a convenient and cost-saving software pack.

Spyware Description:

Passware Kit is a password recovery tool that is used to uncover and display lost or forgotten passwords on a computer or network. The password recovery tool may be used to gain unauthorized access to user s data. It is harmful if installed without the knowledge of the user.

Characteristics/Symptoms:

    -> It is harmful if installed without the knowledge of the user. -> It may be used to gain unauthorized access to user s data.

Additional information might be found here:

googleSearch at Google for Passware Kit
bingSearch at Bing for Passware Kit
yahooSearch at Yahoo for Passware Kit

Processes Running:

123key.exe

File information Created after Installation:

File LocationSize (Bytes)Type
C:\Program Files\Passware\demos\pk.chm60800Compiled HTML Help file
C:\Program Files\Passware\demos\pk80.dll2945024Application Extension
C:\Program Files\Passware\demos\projkey.exe37888Application

Folder information Created after Installation:

Folder Location
C:\Documents and Settings\[USER]\Start Menu\Programs\Passware Dem

Registry information Created after Installation:

Main Registry KeySub Registry KeyKey Value Name
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Passware Kit Enterprise DemoChanged
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Passware Kit Enterprise DemoDisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Passware Kit Enterprise DemoUninstallString