Windows Password
Windows Password is a password recovery tool that is used to uncover and display lost or forgotten passwords on a computer or network. The password recovery tool may be used to gain unauthorized access to a computer and to a user s data. It is harmful
if installed without the knowledge of the user.
General information:
| Malware Name: |
Windows Password |
| Malware Type: |
Password Recovery Tool |
| Company Name: |
LastBit Software |
| Company URL: |
http://www.lastbit.com/
|
| Threat Level: |
Low Risk |
| Operating System: |
WIN XP |
| Installation Type: |
Installed through EXE |
| Operation: |
Time of After Installation |
Company Description:
LastBit Software provides you the software Windows Password that (formerly known as NT Password) is an application for NT / 2000 / XP / 2003. It tries to recover plain-text passwords analyzing user password hashes.
Spyware Description:
Windows Password is a password recovery tool that is used to uncover and display lost or forgotten passwords on a computer or network. The password recovery tool may be used to gain unauthorized access to a computer and to a user s data. It is harmful
if installed without the knowledge of the user.
Characteristics/Symptoms:
-> It is harmful if installed without the knowledge of the user. -> It may be used to gain unauthorized access to user s data.
Additional information might be found here:
Processes Running:
winpsw.exe
File information Created after Installation:
| File Location |
Size (Bytes) |
Type |
| C:\Documents and Settings\[USER]\Start Menu\Programs\WinPassword\Uninstall.lnk |
1349 |
Shortcut |
| C:\Program Files\WinPassword\unsetup.exe |
73728 |
Application |
| C:\Program Files\WinPassword\winpsw.exe |
882688 |
Application |
Folder information Created after Installation:
Registry information Created after Installation:
| Main Registry Key |
Sub Registry Key |
Key Value Name |
| HKEY_CURRENT_USER |
\Software\WinPsw\WinPassword\BarState-Bar2 |
Bar#1 |
| HKEY_CURRENT_USER |
\Software\WinPsw\WinPassword\BarState-Bar6 |
MRUFloatStyle |
| HKEY_CURRENT_USER |
\Software\WinPsw\WinPassword\BarState-Bar6 |
MRUFloatYPos |