RAR Key

RAR Key is a password recovery tool that is used to uncover and display lost or forgotten passwords on a computer or network. The password recovery tool may be used to gain unauthorized access to a computer and to a user's data. It is harmful if installed without the knowledge of the user.0

General information:

Malware Name: RAR Key
Malware Type: Password Recovery Tool
Company Name: LostPassword.com
Company URL: http://www.lostpassword.com/
Threat Level: Low Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation

Company Description:

LostPassword.com provides you the software RAR Key that recovers passwords for RAR archives. All versions of RAR are supported including 3.x. Program automatically saves password search state and can resume after a stop or a crash. Patterns can be used to minimize search time if any part of the password is known. Non-English characters in passwords are supported.

Spyware Description:

RAR Key is a password recovery tool that is used to uncover and display lost or forgotten passwords on a computer or network. The password recovery tool may be used to gain unauthorized access to a computer and to a user's data. It is harmful if installed without the knowledge of the user.0

Characteristics/Symptoms:

    -> It may be used to gain unauthorized access to a computer and to a user's data. -> It is harmful if installed without the knowledge of the User.0

Additional information might be found here:

google Search at Google for RAR Key
bing Search at Bing for RAR Key
yahoo Search at Yahoo for RAR Key

Processes Running:

rarkey.exe

File information Created after Installation:

File Location Size (Bytes) Type
C:\Documents and Settings\[USER]\Start Menu\Programs\Passware Demo\RAR Key Demo.lnk 670 Shortcut
C:\Program Files\Passware\demos\dict.txt 454450 Text Document
C:\Program Files\Passware\demos\rarkey.exe 1232896 Application

Folder information Created after Installation:

Folder Location
C:\Program Files\Passware
C:\Program Files\Passware\demos

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_CURRENT_USER \Software\Passware\RAR Key\7\demo\last [NULL]0
HKEY_CURRENT_USER \Software\Passware\RAR Key\7\demo\last brute-force0
HKEY_CURRENT_USER \Software\Passware\common\7 general0