ActMon PWL Password Finder (WASP)
ActMon PWL Password Finder (WASP) is a password recovery tool that may be used to gain unauthorized access to a computer and to a user s data. It is harmful if installed without the knowledge of the user.
General information:
| Malware Name: |
ActMon PWL Password Finder (WASP) |
| Malware Type: |
Password Recovery Tool |
| Company Name: |
ActMon Software |
| Company URL: |
http://www.actmon.com/
|
| Threat Level: |
Low Risk |
| Operating System: |
WIN XP |
| Installation Type: |
Installed through EXE |
| Operation: |
Time of After Installation |
Company Description:
ActMon PWL Password Finder (WASP) that displays all passwords of the currently logged in user that are stored in the Microsoft PWL file password database.
Spyware Description:
ActMon PWL Password Finder (WASP) is a password recovery tool that may be used to gain unauthorized access to a computer and to a user s data. It is harmful if installed without the knowledge of the user.
Characteristics/Symptoms:
-> It may be used to gain unauthorized access to a computer and to a user s data. -> It is harmful if installed without the knowledge of the user.
Additional information might be found here:
Processes Running:
actmon-wasp.exe
File information Created after Installation:
| File Location |
Size (Bytes) |
Type |
| C:\Documents and Settings\All Users\Start Menu\Programs\ActMon WASP\ActMon Write All Stored Passwords (WASP).lnk |
634 |
Shortcut |
| C:\Documents and Settings\All Users\Start Menu\Programs\ActMon WASP\Help.lnk |
595 |
Shortcut |
| desktop \Help, ActMon Write All Stored Passwords (WASP).lnk |
583 |
Shortcut |
Folder information Created after Installation:
| Folder Location |
| C:\Documents and Settings\All Users\Start Menu\Programs\ActMon WAS |
Registry information Created after Installation:
| Main Registry Key |
Sub Registry Key |
Key Value Name |
| HKEY_CURRENT_USER |
\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\ActMon WASP |
|
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ActMon Write All Stored Passwords (WASP)_is1 |
SlowInfoCache |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ActMon Write All Stored Passwords (WASP)_is1 |
URLInfoAbout |