Advanced Windows Password Recovery
Advanced Windows Password Recovery is a password recovery tool that may be used to gain unauthorized access to a computer and to a user's data. It is harmful if installed without the knowledge of the user.0
General information:
| Malware Name: |
Advanced Windows Password Recovery |
| Malware Type: |
Password Recovery Tool |
| Company Name: |
Elcomsoft |
| Company URL: |
http://elcomsoft.com/
|
| Threat Level: |
Low Risk |
| Operating System: |
WIN XP |
| Installation Type: |
Installed through EXE |
| Operation: |
Time of After Installation |
Company Description:
Elcomsoft provides you the software Advanced Windows Password Recovery that is a program to recover most types of Windows passwords: Windows 95/98/ME logon password (when user is logged on), Windows NT4/2000 logon password (when user is logged on
and has Admin privileges) Windows 95/98/ME/NT4/2000/XP/2003 auto logon password, .NET Passport password, Windows XP stored user passwords (multiple credentials), screensaver password, RAS and dial-up passwords, passwords to VPN (Virtual Private Network)
connections passwords and access rights to shared resources.
Spyware Description:
Advanced Windows Password Recovery is a password recovery tool that may be used to gain unauthorized access to a computer and to a user's data. It is harmful if installed without the knowledge of the user.0
Characteristics/Symptoms:
-> It is harmful if installed without the knowledge of the User. -> It may be used to gain unauthorized access to a computer and to a user's data.0
Additional information might be found here:
Processes Running:
pspr.exe
File information Created after Installation:
| File Location |
Size (Bytes) |
Type |
| C:\Program Files\ElcomSoft\PSPR\awpr.ini |
1096 |
Configuration Settings |
| C:\Program Files\ElcomSoft\PSPR\awprhook.dll |
57344 |
Application Extension |
| C:\Program Files\ElcomSoft\PSPR\awprserv.dll |
52224 |
Application Extension |
Folder information Created after Installation:
| Folder Location |
| C:\Program Files\ElcomSoft\PSPR |
Registry information Created after Installation:
| Main Registry Key |
Sub Registry Key |
Key Value Name |
| HKEY_CURRENT_USER |
\Software\Elcom\Advanced Windows Password Recovery |
Installer Language0 |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Elcom\Advanced Windows Password Recovery |
InstallDir0 |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Elcom\Advanced Windows Password Recovery\Options |
ServiceStop0 |
