Zip Key

Zip Key is a password recovery tool that may be used to gain unauthorized access to a computer and to a user s data. It is harmful if installed without the knowledge of the user.

General information:

Malware Name: Zip Key
Malware Type: Password Recovery Tool
Company Name: LostPassword.com
Company URL: http://www.lostpassword.com/
Threat Level: Low Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation

Company Description:

LostPassword.com provides you the software Zip Key that is a program to recover passwords for ZIP archives created with WinZip, PKZip or any other ZIP-compatible software. All versions of WinZip and PKZip are supported. Program automatically saves password search state and can resume after a stop or a crash. Patterns can be used to minimize search time if any part of the password is known. Non-English characters in passwords are supported.

Spyware Description:

Zip Key is a password recovery tool that may be used to gain unauthorized access to a computer and to a user s data. It is harmful if installed without the knowledge of the user.

Characteristics/Symptoms:

    -> It may be used to gain unauthorized access to a computer and to a user s data. -> It is harmful if installed without the knowledge of the user.

Additional information might be found here:

google Search at Google for Zip Key
bing Search at Bing for Zip Key
yahoo Search at Yahoo for Zip Key

Processes Running:

zipkey.exe

File information Created after Installation:

File Location Size (Bytes) Type
C:\Documents and Settings\[USER]\Start Menu\Programs\Passware Demo\Zip Key Demo.lnk 670 Shortcut
C:\Program Files\Passware\demos\pk.chm 60880 Compiled HTML Help file
C:\Program Files\Passware\demos\zipkey.exe 1355776 Application

Folder information Created after Installation:

Folder Location
C:\Documents and Settings\[USER]\Start Menu\Programs\Passware Dem
C:\Program Files\Passware\demo

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Zip Key Demo Changed
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Zip Key Demo SlowInfoCache
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Zip Key Demo