Advanced Windows Password Recovery

Description: Spyware
Risk Level: Low
Date of First Occurence: Tuesday, April 15, 2008
Software Developer: (unknown)
Brief Info: Spyware is computer software that is installed surreptitiously on a personal computer to intercept or take partial control over the user's interaction with the computer, without the user's informed consent.
Removal: This threat can be removed using "Spyware Terminator"

SCAN & REMOVE NOW »

Geographical Distribution of Threat "Advanced Windows Password Recovery"

Threat Info

View All

Detected Items

  1. Detected Files: %PROGRAMFILES%\ElcomSoft\PSPR\esil.dll MD5: 6D395EE2D50AB1B64592135E94DF04DD Size:43008 MD5: B16BB725452FBFF60506DB31CC8416AF Size:45568 MD5: 3BEEAEA8EAC1BA2A13BD1EA74FC9784F Size:45056 %PROGRAMFILES%\ElcomSoft\PSPR\elcom_reg.dll MD5: E9ABA56E694928056D25024E03DB9D49 Size:110592 MD5: B59292652867F39A56795B41599B458D Size:118784 MD5: 8788CF6F3CFFBB50F1555746A2EEC989 Size:114688 %PROGRAMFILES%\ElcomSoft\PSPR\awprserv.dll MD5: 40403016CD1192158B709E2DB51B053D Size:37888 MD5: F44F649BBDE5B87E5827CC9FBA4604BA Size:53760 MD5: 7A2DD6187A7F012E968235A08B91C5BE Size:52224 MD5: 046F979EEBCB7AEB96F6F83DA5208B9B Size:37888 %PROGRAMFILES%\ElcomSoft\PSPR\awprhook.dll MD5: 6222BBB2FAA1023077A2CBC32B6BDE3C Size:57344 MD5: 1BE352B60BEC5B3FF29D957E40EC4879 Size:81920 %PROGRAMFILES%\ElcomSoft\PSPR\Uninstall.exe MD5: 28227E13B3C074BC7FAA2551F8A52F3B Size:46029 MD5: 15681BF947A2BE0F9238108EA2D176CB Size:61750 MD5: C6A286D523A6D25F6F89CF8B08F33F26 Size:64383 MD5: 19804F2D14231DD5C621DC10E1BDDB5E Size:45107 MD5: FA90C44679C30BEDF0C6E97FF290F90B Size:65134 MD5: B09C53F2A2CF0E45C3FB45A49154FCA7 Size:61750 %PROGRAMFILES%\ElcomSoft\PSPR\pspr.exe MD5: 43EF22CA8DB1E0C57BD0606E8CBE207A Size:1025626 MD5: A5B3BCAD1D7247048BFC50D38F9B014A Size:1199616 MD5: 9A38B26249D68BC79E541006261B71C7 Size:1190912 MD5: 0ACF6592856CD6B840C16DA391F87D3F Size:1114714 MD5: 99512D55C60B32C2644402DAF8CD4AE7 Size:1176064 MD5: 6DA60BD69AFA5DC192FC259C39084EE9 Size:1003098 MD5: D25A285E0860CAB5160C42A7D67A5341 Size:2357583 MD5: C90B963496BC57AC9D8F02B46349C28E Size:1207808 MD5: FD0FF0602501C63D0413FE1DA6F21D27 Size:1201152 %PROGRAMFILES%\ElcomSoft\PSPR\psprserv.exe MD5: D7275F0CA2FA2E7E0E9D8893C8F46C78 Size:20992 MD5: BE2CD89472E0719E42F72DA101DD0CB0 Size:21504 %PROGRAMFILES%\ElcomSoft\PSPR\elcom_xml.dll MD5: 6F7B375A9B0040D042E89C62F15CE5BD Size:94208 %PROGRAMFILES%\ElcomSoft\PSPR\AWPR.exe MD5: 366B18E6E45D54D727C52604560DCBA1 Size:428032 %PROGRAMFILES%\ElcomSoft\PSPR\proactive.system.password.recovery.5.0.0.613-patch.exe MD5: F848C39378C87318E2D46D83659408A5 Size:216064 %PROGRAMFILES%\ElcomSoft\PSPR\proactive.system.password.recovery.5.2.2.644-patch.exe MD5: 6EC40AE9D536C8CC5784F0632AFA9B02 Size:497701
  2. Detected Files with variable Filenames: MD5: A5B3BCAD1D7247048BFC50D38F9B014A Size: 1199616 %PROGRAMFILES%\ElcomSoft\PSPR\pspr.exe %PROGRAMFILES%\ElcomSoft\PSPR\pspr.exe.BAK MD5: 9A38B26249D68BC79E541006261B71C7 Size: 1190912 %PROGRAMFILES%\ElcomSoft\PSPR\pspr.exe %PROGRAMFILES%\ElcomSoft\PSPR\pspr.exe.BAK

Detecting items list:

  1. Files by Name %PROGRAMFILES%\ElcomSoft\PSPR\awprhook.dll %PROGRAMFILES%\ElcomSoft\PSPR\awprserv.dll %PROGRAMFILES%\ElcomSoft\PSPR\elcom_reg.dll %PROGRAMFILES%\ElcomSoft\PSPR\esil.dll %PROGRAMFILES%\ElcomSoft\PSPR\pspr.exe %PROGRAMFILES%\ElcomSoft\PSPR\psprserv.exe %PROGRAMFILES%\ElcomSoft\PSPR\Uninstall.exe %START_PROGRAMS%\Proactive System Password Recovery\End-User License Agreement.lnk %START_PROGRAMS%\Proactive System Password Recovery\How to order.lnk %START_PROGRAMS%\Proactive System Password Recovery\Proactive System Password Recovery Help.lnk %START_PROGRAMS%\Proactive System Password Recovery\Proactive System Password Recovery.lnk %START_PROGRAMS%\Proactive System Password Recovery\Readme.lnk %START_PROGRAMS%\Proactive System Password Recovery\Uninstall PSPR.lnk
  2. Files by Directories %PROGRAMFILES%\ElcomSoft\PSPR %START_PROGRAMS%\Proactive System Password Recovery
  3. Registry Keys HKCU\Software\Elcom\Advanced Windows Password Recovery HKLM\SOFTWARE\Elcom\Advanced Windows Password Recovery HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Proactive System Password Recovery

« Go to Software Database