Lotus 1-2-3 Password

Lotus 1-2-3 Password is a password recovery tool that may be used to gain unauthorized access to a computer and to a user's data. It is harmful if installed without the knowledge of the user.0

General information:

Malware Name: Lotus 1-2-3 Password
Malware Type: Password Recovery Tool
Company Name: Thegrideon Software
Company URL: http://thegrideon.com/
Threat Level: Low Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation

Company Description:

Thegrideon Software provides you the software Lotus 1-2-3 Password that allows you to recover passwords which Lotus 1-2-3 files (.123, .wk1, .wk3, .wk4) are protected with. It can recover passwords for all Lotus 1-2-3 security levels (open and unlock security level). It can work with all versions of Lotus 1-2-3 files. This is very powerful tool to sysadmins security officers and all who have problems with Lotus 1-2-3 passwords.

Spyware Description:

Lotus 1-2-3 Password is a password recovery tool that may be used to gain unauthorized access to a computer and to a user's data. It is harmful if installed without the knowledge of the user.0

Characteristics/Symptoms:

    -> It may be used to gain unauthorized access to a computer and to a user's data. -> It is harmful if installed without the knowledge of the user.0

Additional information might be found here:

google Search at Google for Lotus 1-2-3 Password
bing Search at Bing for Lotus 1-2-3 Password
yahoo Search at Yahoo for Lotus 1-2-3 Password

Processes Running:

123Pass.exe

File information Created after Installation:

File Location Size (Bytes) Type
C:\Documents and Settings\[USER]\Start Menu\Programs\Lotus 123 Password\123 Password.lnk 1717 Shortcut
C:\Documents and Settings\[USER]\Start Menu\Programs\Lotus 123 Password\Uninstall.lnk 1733 Shortcut
C:\Program Files\Thegrideon Software\123 Password\Uninstall.exe 37454 Application

Folder information Created after Installation:

Folder Location
C:\Program Files\Thegrideon Software\123 Password

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_CURRENT_USER \Software\Thegrideon Software\123 Password [NULL]0
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\TS 123 Password DisplayName0
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\TS 123 Password [NULL]0