VBA Recovery 2005

VBA Recovery 2005 is a password recovery tool that is used to uncover and display lost or forgotten passwords on a computer. The password recovery tool may be used to gain unauthorized access to user s data. It is harmful if installed without the knowledge of the user.

General information:

Malware Name: VBA Recovery 2005
Malware Type: Password Recovery Tool
Company Name: PasswordService
Company URL: http://www.passwordservice.com/
Threat Level: Low Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation

Company Description:

PasswordService provides you the software VBA Recovery 2005 that is a password recovery tool (password cracker) for VBA modules embedded in Word and Excel documents. You can use VBA Recovery to crack lost or forgotten password to Word or Excel macros stored in VBA module.

Spyware Description:

VBA Recovery 2005 is a password recovery tool that is used to uncover and display lost or forgotten passwords on a computer. The password recovery tool may be used to gain unauthorized access to user s data. It is harmful if installed without the knowledge of the user.

Characteristics/Symptoms:

    -> It may be used to gain unauthorized access to user s data. -> It is harmful if installed without the knowledge of the user.

Additional information might be found here:

google Search at Google for VBA Recovery 2005
bing Search at Bing for VBA Recovery 2005
yahoo Search at Yahoo for VBA Recovery 2005

Processes Running:

pwdVBA.exe

File information Created after Installation:

File Location Size (Bytes) Type
C:\Program Files\PasswordService (DEMO)\unsetup.dat 4090 DAT File
C:\Program Files\PasswordService (DEMO)\unsetup.exe 73728 Application
C:\Program Files\PasswordService (DEMO)\word.htm 488 HTML Document

Folder information Created after Installation:

Folder Location
C:\Documents and Settings\[USER]\Start Menu\Programs\PasswordService Recovery Suite (DEMO

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PasswordService Recovery Suite (DEMO)
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PasswordService Recovery Suite (DEMO) DisplayName
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PasswordService Recovery Suite (DEMO) UninstallString