Advanced Office Password Recovery
Advanced Office Password Recovery is a password recovery tool that may be used to gain unauthorized access to a computer and to a user s data. It is harmful if installed without the knowledge of the user.
General information:
| Malware Name: |
Advanced Office Password Recovery |
| Malware Type: |
Password Recovery Tool |
| Company Name: |
Elcomsoft |
| Company URL: |
http://elcomsoft.com/
|
| Threat Level: |
Low Risk |
| Operating System: |
WIN XP |
| Installation Type: |
Installed through EXE |
| Operation: |
Time of After Installation |
Company Description:
Elcomsoft provides you the software Advanced Office Password Recovery that is a program to recover the lost or forgotten passwords to the files/documents created in Microsoft Office applications (all versions up to Office 2003): Word, Excel, Access
(including user-level passwords and owner info), Outlook, Project, Money, PowerPoint, Visio, Publisher, OneNote, Backup, Schedule , Mail. Can also reset MS Internet Explorer (3/4/5) Content Advisor password, and open password-protected VBA projects
(created in any application) via the backdoor .
Spyware Description:
Advanced Office Password Recovery is a password recovery tool that may be used to gain unauthorized access to a computer and to a user s data. It is harmful if installed without the knowledge of the user.
Characteristics/Symptoms:
-> It is harmful if installed without the knowledge of the user. -> It may be used to gain unauthorized access to a computer and to a user s data.
Additional information might be found here:
Processes Running:
aopr.exe
File information Created after Installation:
| File Location |
Size (Bytes) |
Type |
| C:\Program Files\ElcomSoft\AOPR\license.doc |
84480 |
Microsoft Word Document |
| C:\Program Files\ElcomSoft\AOPR\order_lang.xml |
11666 |
XML Document |
| C:\Program Files\ElcomSoft\AOPR\russian.lng |
55445 |
LNG File |
Folder information Created after Installation:
| Folder Location |
| C:\Documents and Settings\[USER]\Start Menu\Programs\Advanced Office Password Recover |
| C:\Program Files\ElcomSoft\AOPR\charset |
Registry information Created after Installation:
| Main Registry Key |
Sub Registry Key |
Key Value Name |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Advanced Office Password Recovery |
|
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Advanced Office Password Recovery |
DisplayName |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Advanced Office Password Recovery |
UninstallString |
