Word Recovery 2005

Word Recovery 2005 is a password recovery tool that is used to uncover and display lost or forgotten passwords on a computer or network. The password recovery tool may be used to gain unauthorized access to a computer and to a user s data. It is harmful if installed without the knowledge of the user.

General information:

Malware Name: Word Recovery 2005
Malware Type: Password Recovery Tool
Company Name: Passwordservice.com
Company URL: http://www.passwordservice.com/
Threat Level: Low Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation

Company Description:

Passwordservice.com provides you the software Word Recovery 2005 that is a password recovery tool for Word. Guaranteed Recovery feature will unlock your document without brute-force attack! All Word versions through 2003 are supported.

Spyware Description:

Word Recovery 2005 is a password recovery tool that is used to uncover and display lost or forgotten passwords on a computer or network. The password recovery tool may be used to gain unauthorized access to a computer and to a user s data. It is harmful if installed without the knowledge of the user.

Characteristics/Symptoms:

    -> It is harmful if installed without the knowledge of the user. -> It may be used to gain unauthorized access to user s data.

Additional information might be found here:

google Search at Google for Word Recovery 2005
bing Search at Bing for Word Recovery 2005
yahoo Search at Yahoo for Word Recovery 2005

Processes Running:

pwdWord.exe

File information Created after Installation:

File Location Size (Bytes) Type
C:\Program Files\PasswordService (DEMO)\mexcel.htm 10082 HTML Document
C:\Program Files\PasswordService (DEMO)\mmoney.htm 3580 HTML Document
C:\Program Files\PasswordService (DEMO)\money.htm 490 HTML Document

Folder information Created after Installation:

Folder Location
C:\Program Files\PasswordService (DEMO

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PasswordService Recovery Suite (DEMO) UninstallString
HKEY_LOCAL_MACHINE \SOFTWARE\PasswordService
HKEY_LOCAL_MACHINE \SOFTWARE\PasswordService\PasswordService Recovery Suite (DEMO)