ResShow
ResShow is a password recovery tool that is used to uncover and display lost or forgotten passwords on a computer or network. The password recovery tool may be used to gain unauthorized access to a computer and to a user's data. It is harmful
if installed without the knowledge of the user. ResShow is a password recovery tool that is used to uncover and display lost or forgotten passwords on a computer or network. The password recovery tool may be used to gain unauthorized access to a
computer and to a user's data. It is harmful if installed without the knowledge of the user.0
General information:
| Malware Name: |
ResShow |
| Malware Type: |
Password Recovery Tool |
| Company Name: |
Anton Vasilje |
| Company URL: |
http://softof.narod.ru/
|
| Threat Level: |
Low Risk |
| Operating System: |
WIN XP |
| Installation Type: |
Installed through EXE |
| Operation: |
Time of After Installation |
Company Description:
Anton Vasilje provides you the software ResShow that is a small program, which allows keeping a journal of system and keyboard events. It gives information about system passwords, network, IP-addresses, computerÃs configuration, memory, current
processes is running. It can also determine Windows metrics. ResShow runs under Windows 95/98.
Spyware Description:
ResShow is a password recovery tool that is used to uncover and display lost or forgotten passwords on a computer or network. The password recovery tool may be used to gain unauthorized access to a computer and to a user's data. It is harmful
if installed without the knowledge of the user. ResShow is a password recovery tool that is used to uncover and display lost or forgotten passwords on a computer or network. The password recovery tool may be used to gain unauthorized access to a computer
and to a user's data. It is harmful if installed without the knowledge of the user.0
Characteristics/Symptoms:
-> It is harmful if installed without the knowledge of the user. -> It may be used to gain unauthorized access to a computer and to a user's data.
Additional information might be found here:
Processes Running:
resshow.exe
File information Created after Installation:
| File Location |
Size (Bytes) |
Type |
| C:\Documents and Settings\priya\Start Menu\Programs\ResShow ver3.03\ResShow ver3.03.lnk |
642 |
Shortcut |
| C:\Program Files\ResShow ver3.03\readme.eng |
1972 |
ENG File |
| C:\Program Files\ResShow ver3.03\uninstall.ini |
3233 |
Configuration Settings |
Folder information Created after Installation:
| Folder Location |
| C:\Program Files\ResShow ver3.03 |
Registry information Created after Installation:
| Main Registry Key |
Sub Registry Key |
Key Value Name |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ResShow ver3.03 |
Changed0 |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ResShow ver3.03 |
SlowInfoCache0 |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ResShow ver3.03 |
[NULL]0 |
