MultiPassRecover

MultiPassRecover is a password recovery tool that may be used to gain unauthorized access to a computer and to a user s data. It is harmful if installed without the knowledge of the user.

General information:

Malware Name: MultiPassRecover
Malware Type: Password Recovery Tool
Company Name: passrecovery.com
Company URL: http://passrecovery.com/
Threat Level: Low Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation

Company Description:

passrecovery.com provides you the software MultiPassRecover that is a multifunctional password decryption and auditing solution for Win95/98/W2K/XP/2K3/Vista. MPR instantly finds and recovers passwords from more than 70 popular applications (FTP, E-mail clients, IM, Browsers and so on). It also shows passwords hidden under asterisks, copies SAM file, can generate new passwords. Under W2K/XP/2K3 MPR is able to process blocked for reading files.

Spyware Description:

MultiPassRecover is a password recovery tool that may be used to gain unauthorized access to a computer and to a user s data. It is harmful if installed without the knowledge of the user.

Characteristics/Symptoms:

    -> It may be used to gain unauthorized access to a computer and to a user s data. -> It is harmful if installed without the knowledge of the user.

Additional information might be found here:

google Search at Google for MultiPassRecover
bing Search at Bing for MultiPassRecover
yahoo Search at Yahoo for MultiPassRecover

Processes Running:

MPR.exe

File information Created after Installation:

File Location Size (Bytes) Type
C:\Documents and Settings\[USER]\Start Menu\Programs\Multi Password Recovery\MPR.lnk 595 Shortcut
C:\Documents and Settings\[USER]\Start Menu\Programs\Multi Password Recovery\Readme.lnk 611 Shortcut
C:\Documents and Settings\[USER]\Start Menu\Programs\Multi Password Recovery\Uninstall.lnk 625 Shortcut

Folder information Created after Installation:

Folder Location
C:\Program Files\Multi Password Recover

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Multi Password Recovery NoRepair
HKEY_LOCAL_MACHINE \SYSTEM\ControlSet001\Services\mpr_freader\Enum NextInstance
HKEY_LOCAL_MACHINE \SYSTEM\CurrentControlSet\Services\mpr_freader Start