Virus Encyclopedia

Welcome to the Virus Encyclopedia of Panda Security.

Recovery
Threat LevelDamageDistribution

Effects 

Recovery obtains files with a PWL extension from the affected computer. These files contain sensitive information like dial-up and network passwords and are usually used only by Microsoft programs.

Additionally, Recovery only affects computers with Windows ME/98/95 operating systems.

Infection strategy 

Recovery creates the following entry in the Windows Registry:

• HKEY_CURRENT_USER\ Software\ Microsoft\ InternetExplorer\ Main
  StartPage = www.progenic.com
  By creating this entry, Recovery modifies the home page of Internet Explorer.

Further Details  

Recovery is written in the programming language Visual C++ v4.20. This hacking tool is 26,112 bytes in size.

Additionally, the option menu of Recovery is the following: