Windows 2000XP Password Recovery
Windows 2000XP Password Recovery is a password recovery tool that may be used to gain unauthorized access to a computer and to a user s data. It is harmful if installed without the knowledge of the user.
General information:
| Malware Name: |
Windows 2000XP Password Recovery |
| Malware Type: |
Password Recovery Tool |
| Company Name: |
Alpine Snow |
| Company URL: |
http://alpinesnow.com/
|
| Threat Level: |
Low Risk |
| Operating System: |
WIN XP |
| Installation Type: |
Installed through EXE |
| Operation: |
Time of After Installation |
Company Description:
Alpine Snow provides you the software Windows 2000XP Password Recovery which is used to capture passwords of the windows 2000, windows XP Home and Professional editions. It instantly decrypts and recovers the password to the user currently logged
into Windows. It also works on all versions of Windows 2000, Windows XP Home and Professional editions.
Spyware Description:
Windows 2000XP Password Recovery is a password recovery tool that may be used to gain unauthorized access to a computer and to a user s data. It is harmful if installed without the knowledge of the user.
Characteristics/Symptoms:
-> It is harmful if installed without the knowledge of the user. -> It may be used to gain unauthorized access to a computer and to a user s data.
Additional information might be found here:
Processes Running:
WinPass.exe
File information Created after Installation:
| File Location |
Size (Bytes) |
Type |
| C:\Documents and Settings\[USER]\Start Menu\Programs\Windows Password Recovery\Uninstall.lnk |
619 |
Shortcut |
| C:\Documents and Settings\[USER]\Start Menu\Programs\Windows Password Recovery\Windows 2000 and XP Password Recovery.lnk |
624 |
Shortcut |
| C:\Program Files\Windows Password Recovery\WinPass.exe |
32768 |
Application |
Folder information Created after Installation:
| Folder Location |
| C:\Documents and Settings\[USER]\Start Menu\Programs\Windows Password Recover |
Registry information Created after Installation:
| Main Registry Key |
Sub Registry Key |
Key Value Name |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Windows 2000/XP Password Recovery |
SlowInfoCache |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Windows 2000/XP Password Recovery |
|
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Windows 2000/XP Password Recovery |
DisplayName |
