ActMon PWL Password Finder (WASP)
ActMon PWL Password Finder (WASP) is a password recovery tool that may be used to gain unauthorized access to a computer and to a user s data. It is harmful if installed without the knowledge of the user.
General information:
Malware Name: |
ActMon PWL Password Finder (WASP) |
Malware Type: |
Password Recovery Tool |
Company Name: |
ActMon Software |
Company URL: |
http://www.actmon.com/
|
Threat Level: |
Low Risk |
Operating System: |
WIN XP |
Installation Type: |
Installed through EXE |
Operation: |
Time of After Installation |
Company Description:
ActMon PWL Password Finder (WASP) that displays all passwords of the currently logged in user that are stored in the Microsoft PWL file password database.
Spyware Description:
ActMon PWL Password Finder (WASP) is a password recovery tool that may be used to gain unauthorized access to a computer and to a user s data. It is harmful if installed without the knowledge of the user.
Characteristics/Symptoms:
-> It may be used to gain unauthorized access to a computer and to a user s data. -> It is harmful if installed without the knowledge of the user.
Additional information might be found here:
Processes Running:
actmon-wasp.exe
File information Created after Installation:
File Location |
Size (Bytes) |
Type |
C:\Documents and Settings\All Users\Start Menu\Programs\ActMon WASP\ActMon Write All Stored Passwords (WASP).lnk |
634 |
Shortcut |
C:\Documents and Settings\All Users\Start Menu\Programs\ActMon WASP\Help.lnk |
595 |
Shortcut |
desktop \Help, ActMon Write All Stored Passwords (WASP).lnk |
583 |
Shortcut |
Folder information Created after Installation:
Folder Location |
C:\Documents and Settings\All Users\Start Menu\Programs\ActMon WAS |
Registry information Created after Installation:
Main Registry Key |
Sub Registry Key |
Key Value Name |
HKEY_CURRENT_USER |
\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\ActMon WASP |
|
HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ActMon Write All Stored Passwords (WASP)_is1 |
SlowInfoCache |
HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ActMon Write All Stored Passwords (WASP)_is1 |
URLInfoAbout |