PasswordServiceRecovery Suite
|
Description:
|
Spyware
|
|
Risk Level:
|
Low
|
|
Date of First Occurence:
|
Tuesday, July 22, 2008
|
|
Software Developer:
|
(unknown)
|
|
Brief Info:
|
Spyware is computer software that is installed surreptitiously on a personal computer to intercept or take partial control over the user's interaction with the computer, without the user's informed consent.
|
|
Removal:
|
This threat can be removed using "Spyware
Terminator"
|
SUPPRIMER SPYWARE »
Geographical Distribution of Threat "PasswordServiceRecovery Suite"
Threat Info
View All
Detected Items
- Detected Files:
%PROGRAMFILES%\PasswordService (DEMO)\pwdWord.exe
MD5: 73D4C27F9C1322956919FE5A2AEC6163 Size:180224
%PROGRAMFILES%\PasswordService (DEMO)\pwdVBA.exe
MD5: A1EB83781F36F4A2F97154B712A78A1B Size:106496
%PROGRAMFILES%\PasswordService (DEMO)\pwdOutlook.exe
MD5: A474C0701C36792C1C951795D770AB60 Size:98304
%PROGRAMFILES%\PasswordService (DEMO)\pwdMoney.exe
MD5: CAD086AC3540E9AA21FCDB7241423C5A Size:94208
%PROGRAMFILES%\PasswordService (DEMO)\pwdExcel.exe
MD5: E1F0D5F338E1C0C56B748D8429C4374C Size:180224
- Detected Files with variable Filenames:
Detecting items list:
- Files by Name
%PROGRAMFILES%\PasswordService (DEMO)\pwdExcel.exe
%PROGRAMFILES%\PasswordService (DEMO)\pwdMoney.exe
%PROGRAMFILES%\PasswordService (DEMO)\pwdOutlook.exe
%PROGRAMFILES%\PasswordService (DEMO)\pwdVBA.exe
%PROGRAMFILES%\PasswordService (DEMO)\pwdWord.exe
%START_PROGRAMS%\PasswordService Recovery Suite (DEMO)\Excel Recovery Module.lnk
%START_PROGRAMS%\PasswordService Recovery Suite (DEMO)\Money Recovery Module.lnk
%START_PROGRAMS%\PasswordService Recovery Suite (DEMO)\Outlook Recovery Module.lnk
%START_PROGRAMS%\PasswordService Recovery Suite (DEMO)\VBA Recovery Module.lnk
%START_PROGRAMS%\PasswordService Recovery Suite (DEMO)\Word Recovery Module.lnk
- Files by Directories
%PROGRAMFILES%\PasswordService (DEMO) %START_PROGRAMS%\PasswordService Recovery Suite (DEMO)
- Registry Keys
HKCU\Software\PasswordService\pwdVBA
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\pwdVBA.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\PasswordService Recovery Suite (DEMO)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PasswordService Recovery Suite (DEMO)
«
Go to Software Database
