Access Recovery 2005
|
Description:
|
Spyware
|
|
Risk Level:
|
Low
|
|
Date of First Occurence:
|
Thursday, May 01, 2008
|
|
Software Developer:
|
(unknown)
|
|
Brief Info:
|
Spyware is computer software that is installed surreptitiously on a personal computer to intercept or take partial control over the user's interaction with the computer, without the user's informed consent.
|
|
Removal:
|
This threat can be removed using "Spyware
Terminator"
|
SCAN & REMOVE NOW »
Geographical Distribution of Threat "Access Recovery 2005"
Threat Info
View All
Detected Items
- Detected Files:
%SYSDIR%\pwssup.dll
MD5: 455E5C4FFA2881F8D55AF88D3F2B9C4A Size:45056
%PROGRAMFILES%\PasswordService (DEMO)\unsetup.exe
MD5: BDC5F80B93D7EBCA258CDAA469814C13 Size:73728
MD5: 22E8803DE1D18517518C862E5A7C3AEE Size:73728
MD5: 8870546262E056A7BC4F420E1727F1D8 Size:73728
%PROGRAMFILES%\PasswordService (DEMO)\pwdAccess.exe
MD5: 88F32920F555469F43908A3F343C8512 Size:94208
MD5: 4469D8DF5CF38A027F297DD2B6E5E110 Size:98304
- Detected Files with variable Filenames:
Detecting items list:
- Files by Name
%PROGRAMFILES%\PasswordService (DEMO)\pwdAccess.exe
%START_PROGRAMS%\PasswordService Recovery Suite (DEMO)\Access Recovery Module.lnk
%SYSDIR%\pwssup.dll
- Files by Directories
%PROGRAMFILES%\PasswordService (DEMO) %START_PROGRAMS%\PasswordService Recovery Suite (DEMO)
- Registry Keys
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\PasswordService Recovery Suite (DEMO)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\pwdAccess.exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PasswordService Recovery Suite (DEMO)
HKLM\SOFTWARE\PasswordService\PasswordService Recovery Suite (DEMO)
«
Go to Software Database