Windows Password

Windows Password is a password recovery tool that is used to uncover and display lost or forgotten passwords on a computer or network. The password recovery tool may be used to gain unauthorized access to a computer and to a user s data. It is harmful if installed without the knowledge of the user.

General information:

Malware Name: Windows Password
Malware Type: Password Recovery Tool
Company Name: LastBit Software
Company URL: http://www.lastbit.com/
Threat Level: Low Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation

Company Description:

LastBit Software provides you the software Windows Password that (formerly known as NT Password) is an application for NT / 2000 / XP / 2003. It tries to recover plain-text passwords analyzing user password hashes.

Spyware Description:

Windows Password is a password recovery tool that is used to uncover and display lost or forgotten passwords on a computer or network. The password recovery tool may be used to gain unauthorized access to a computer and to a user s data. It is harmful if installed without the knowledge of the user.

Characteristics/Symptoms:

    -> It is harmful if installed without the knowledge of the user. -> It may be used to gain unauthorized access to user s data.

Additional information might be found here:

google Search at Google for Windows Password
bing Search at Bing for Windows Password
yahoo Search at Yahoo for Windows Password

Processes Running:

winpsw.exe

File information Created after Installation:

File Location Size (Bytes) Type
C:\Documents and Settings\[USER]\Start Menu\Programs\WinPassword\Uninstall.lnk 1349 Shortcut
C:\Program Files\WinPassword\unsetup.exe 73728 Application
C:\Program Files\WinPassword\winpsw.exe 882688 Application

Folder information Created after Installation:

Folder Location

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_CURRENT_USER \Software\WinPsw\WinPassword\BarState-Bar2 Bar#1
HKEY_CURRENT_USER \Software\WinPsw\WinPassword\BarState-Bar6 MRUFloatStyle
HKEY_CURRENT_USER \Software\WinPsw\WinPassword\BarState-Bar6 MRUFloatYPos