WS_FTP Password Recoverer
WS_FTP Password Recoverer is a password recovery tool that may be used to gain unauthorized access to a computer and to a user s data. It is harmful if installed without the knowledge of the user.
General information:
| Malware Name: |
WS_FTP Password Recoverer |
| Malware Type: |
Password Recovery Tool |
| Company Name: |
Fröbis |
| Company URL: |
http://froebis.com/
|
| Threat Level: |
Low Risk |
| Operating System: |
WIN XP |
| Installation Type: |
Installed through EXE |
| Operation: |
Time of After Installation |
Company Description:
Fröbis provides you the software WS_FTP Password Recoverer that is used to recover all the passwords, account names, host addresses, usernames, and passwords to most versions of WS_FTP. The passwords are stored in the .INI files located
in the main WS_FTP folder.
Spyware Description:
WS_FTP Password Recoverer is a password recovery tool that may be used to gain unauthorized access to a computer and to a user s data. It is harmful if installed without the knowledge of the user.
Characteristics/Symptoms:
-> It may be used to gain unauthorized access to a computer and to a user s data. -> It is harmful if installed without the knowledge of the user.
Additional information might be found here:
Processes Running:
Ws_ftp.exe
File information Created after Installation:
| File Location |
Size (Bytes) |
Type |
| C:\Documents and Settings\[USER]\Start Menu\Programs\Froebis\WS_FTP Password Recoverer 2.5\Readme.txt.lnk |
647 |
Shortcut |
| C:\Documents and Settings\[USER]\Start Menu\Programs\Froebis\WS_FTP Password Recoverer 2.5\WS_FTP Password Recoverer 2.5.lnk |
647 |
Shortcut |
| C:\Program Files\WS_FTP Password Recoverer 2.5\File_ID.diz |
538 |
DIZ File |
Folder information Created after Installation:
| Folder Location |
| C:\Documents and Settings\[USER]\Start Menu\Programs\Froebis\WS_FTP Password Recoverer 2. |
| C:\Program Files\WS_FTP Password Recoverer 2.5\BACKU |
Registry information Created after Installation:
| Main Registry Key |
Sub Registry Key |
Key Value Name |
| HKEY_CURRENT_USER |
\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Froebis\WS_FTP Password Recoverer 2.5 |
|
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\WS_FTP Password Recoverer 2.5 |
|
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\WS_FTP Password Recoverer 2.5 |
Changed |
