Passware Kit
Passware Kit is a password recovery tool that is used to uncover and display lost or forgotten passwords on a computer or network. The password recovery tool may be used to gain unauthorized access to user s data. It is harmful if installed without
the knowledge of the user.
General information:
| Malware Name: |
Passware Kit |
| Malware Type: |
Password Recovery Tool |
| Company Name: |
Passware |
| Company URL: |
http://www.lostpassword.com/
|
| Threat Level: |
Low Risk |
| Operating System: |
WIN XP |
| Installation Type: |
Installed through EXE |
| Operation: |
Time of After Installation |
Company Description:
Passware provides you the software Passware Kit that recovers all kinds of passwords for the world s most popular office application files, including Excel, Word, WinZip, Windows XP/2000/NT, Access, Outlook, Quicken, WordPerfect, VBA, 1-2-3, ACT!,
Paradox, Organizer, Schedule, WordPro and more. Passware Kit combines over 25 password recovery modules in a convenient and cost-saving software pack.
Spyware Description:
Passware Kit is a password recovery tool that is used to uncover and display lost or forgotten passwords on a computer or network. The password recovery tool may be used to gain unauthorized access to user s data. It is harmful if installed without
the knowledge of the user.
Characteristics/Symptoms:
-> It is harmful if installed without the knowledge of the user. -> It may be used to gain unauthorized access to user s data.
Additional information might be found here:
Processes Running:
123key.exe
File information Created after Installation:
| File Location |
Size (Bytes) |
Type |
| C:\Program Files\Passware\demos\pk.chm |
60800 |
Compiled HTML Help file |
| C:\Program Files\Passware\demos\pk80.dll |
2945024 |
Application Extension |
| C:\Program Files\Passware\demos\projkey.exe |
37888 |
Application |
Folder information Created after Installation:
| Folder Location |
| C:\Documents and Settings\[USER]\Start Menu\Programs\Passware Dem |
Registry information Created after Installation:
| Main Registry Key |
Sub Registry Key |
Key Value Name |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Passware Kit Enterprise Demo |
Changed |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Passware Kit Enterprise Demo |
DisplayName |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Passware Kit Enterprise Demo |
UninstallString |
