ActMon PWL Password Finder (WASP)

ActMon PWL Password Finder (WASP) is a password recovery tool that may be used to gain unauthorized access to a computer and to a user s data. It is harmful if installed without the knowledge of the user.

General information:

Malware Name: ActMon PWL Password Finder (WASP)
Malware Type: Password Recovery Tool
Company Name: ActMon Software
Company URL: http://www.actmon.com/
Threat Level: Low Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation

Company Description:

ActMon PWL Password Finder (WASP) that displays all passwords of the currently logged in user that are stored in the Microsoft PWL file password database.

Spyware Description:

ActMon PWL Password Finder (WASP) is a password recovery tool that may be used to gain unauthorized access to a computer and to a user s data. It is harmful if installed without the knowledge of the user.

Characteristics/Symptoms:

    -> It may be used to gain unauthorized access to a computer and to a user s data. -> It is harmful if installed without the knowledge of the user.

Additional information might be found here:

google Search at Google for ActMon PWL Password Finder (WASP)
bing Search at Bing for ActMon PWL Password Finder (WASP)
yahoo Search at Yahoo for ActMon PWL Password Finder (WASP)

Processes Running:

actmon-wasp.exe

File information Created after Installation:

File Location Size (Bytes) Type
C:\Documents and Settings\All Users\Start Menu\Programs\ActMon WASP\ActMon Write All Stored Passwords (WASP).lnk 634 Shortcut
C:\Documents and Settings\All Users\Start Menu\Programs\ActMon WASP\Help.lnk 595 Shortcut
desktop \Help, ActMon Write All Stored Passwords (WASP).lnk 583 Shortcut

Folder information Created after Installation:

Folder Location
C:\Documents and Settings\All Users\Start Menu\Programs\ActMon WAS

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_CURRENT_USER \Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\ActMon WASP
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ActMon Write All Stored Passwords (WASP)_is1 SlowInfoCache
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ActMon Write All Stored Passwords (WASP)_is1 URLInfoAbout