Office Key

Office Key is a password recovery tool that is used to uncover and display lost or forgotten passwords on a computer or network. The password recovery tool may be used to gain unauthorized access to a computer and to a user's data. It is harmful if installed without the knowledge of the user. 0

General information:

Malware Name: Office Key
Malware Type: Password Recovery Tool
Company Name: LostPssword.com
Company URL: http://www.lostpassword.com/
Threat Level: Low Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation

Company Description:

LostPssword.com provides you the software Password Recovery Tool that recovers all types of passwords for MS Office files: Access, Excel, Outlook, Word, PowerPoint and Visual Basic for Applications (VBA) modules.

Spyware Description:

Office Key is a password recovery tool that is used to uncover and display lost or forgotten passwords on a computer or network. The password recovery tool may be used to gain unauthorized access to a computer and to a user's data. It is harmful if installed without the knowledge of the user. 0

Characteristics/Symptoms:

    -> It may be used to gain unauthorized access to user's data. -> It is harmful if installed without the knowledge of the user.0

Additional information might be found here:

google Search at Google for Office Key
bing Search at Bing for Office Key
yahoo Search at Yahoo for Office Key

Processes Running:

offkey.exe

File information Created after Installation:

File Location Size (Bytes) Type
C:\Documents and Settings\[USER]\Start Menu\Programs\Passware Demo\Office Key Demo.lnk 670 Shortcut
C:\Program Files\Passware\demos\dict.txt 454450 Text Document
C:\Program Files\Passware\demos\un-offkeyd.exe 34879 Application

Folder information Created after Installation:

Folder Location
C:\Program Files\Passware\demos

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_CURRENT_USER \Software\Passware\Office Key\7\demo\last [NULL]0
HKEY_CURRENT_USER \Software\Passware\Office Key\7\demo\last brute-force0
HKEY_CURRENT_USER \Software\Passware\common\7 general0