Password Discovery

Password Discovery is a password recovery tool that is used to uncover and display lost or forgotten passwords on a computer or network. The password recovery tool may be used to gain unauthorized access to a computer and to a user's data. It is harmful if installed without the knowledge of the user.0

General information:

Malware Name:Password Discovery
Malware Type:Password Recovery Tool
Company Name:PasswordDiscovery
Company URL:http://passworddiscovery.com/
Threat Level:Low Risk
Operating System:WIN XP
Installation Type:Installed through EXE
Operation:Time of After Installation

Company Description:

PasswordDiscovery provides you the software that is a tool to recover lost or forgotten password on almost every windows program and web site (Internet Explorer Only). It is also very easy to use. You can drag the magnifying glass over the hidden password and also immediately password discovery reveals you the hidden password.

Spyware Description:

Password Discovery is a password recovery tool that is used to uncover and display lost or forgotten passwords on a computer or network. The password recovery tool may be used to gain unauthorized access to a computer and to a user's data. It is harmful if installed without the knowledge of the user.0

Characteristics/Symptoms:

    -> It is harmful if installed without the knowledge of the User. -> It may be used to gain unauthorized access to a computer and to a user's data.0

Additional information might be found here:

googleSearch at Google for Password Discovery
bingSearch at Bing for Password Discovery
yahooSearch at Yahoo for Password Discovery

Processes Running:

PwDisco.exe

File information Created after Installation:

File LocationSize (Bytes)Type
C:\Documents and Settings\All Users\Start Menu\Programs\Password Discovery\Password Discovery on the Web.lnk509Shortcut
C:\Documents and Settings\[USER]\Application Data\Microsoft\Internet Explorer\Quick Launch\Password Discovery.lnk595Shortcut
C:\Documents and Settings\[USER]\Desktop\Password Discovery.lnk577Shortcut

Folder information Created after Installation:

Folder Location
C:\Program Files\Password Discovery

Registry information Created after Installation:

Main Registry KeySub Registry KeyKey Value Name
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Password Discovery_is1Changed0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Password Discovery_is1SlowInfoCache0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Password Discovery_is1[NULL]0