Excel Recovery 2005
Excel Recovery 2005 is used to uncover and display lost or forgotten passwords on a computer or network. The password recovery tool may be used to gain unauthorized access to a computer and to a user s data. It is harmful if installed without the
knowledge of the user.
General information:
| Malware Name: |
Excel Recovery 2005 |
| Malware Type: |
Password Recovery Tool |
| Company Name: |
Passwordservice.com |
| Company URL: |
http://www.passwordservice.com/
|
| Threat Level: |
Low Risk |
| Operating System: |
WIN XP |
| Installation Type: |
Installed through EXE |
| Operation: |
Time of After Installation |
Company Description:
Passwordservice.com provides you the software Excel Recovery 2005 that is able to recover password-protected Excel spreadsheets (all Excel versions through Excel 2003). Password-protected documents created in older Excel versions (through Excel 95)
have weaker protection; therefore they take even less time to be recovered.
Spyware Description:
Excel Recovery 2005 is used to uncover and display lost or forgotten passwords on a computer or network. The password recovery tool may be used to gain unauthorized access to a computer and to a user s data. It is harmful if installed without the
knowledge of the user.
Characteristics/Symptoms:
-> It is harmful if installed without the knowledge of the user. -> It may be used to gain unauthorized access to user s data.
Additional information might be found here:
Processes Running:
pwdExcel.exe
File information Created after Installation:
| File Location |
Size (Bytes) |
Type |
| C:\Program Files\PasswordService (DEMO)\bkg.jpg |
7231 |
JPEG Image |
| C:\Program Files\PasswordService (DEMO)\contents.htm |
603 |
Firefox Document |
| C:\Program Files\PasswordService (DEMO)\mexcel.htm |
10082 |
Firefox Document |
Folder information Created after Installation:
| Folder Location |
| C:\Documents and Settings\[USER]\Start Menu\Programs\PasswordService Recovery Suite (DEMO |
Registry information Created after Installation:
| Main Registry Key |
Sub Registry Key |
Key Value Name |
| HKEY_CURRENT_USER |
\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\PasswordService Recovery Suite (DEMO) |
|
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\PasswordService Recovery Suite (DEMO) |
SlowInfoCache |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PasswordService Recovery Suite (DEMO) |
DisplayName |
