Proactive Password Auditor
What is Proactive Password Auditor? (from ElcomSoft Co)
Audit security policies, examine network security and recover account passwords with Proactive Password Auditor. Find out exactly how secure your network is by running a full-scale attack on account passwords. By recovering exposing insecure passwords, Proactive Password Auditor determines the security of your network.... Read more
Overview
Proactive Password Auditor is a software program developed by ElcomSoft Co. The most common release is 2.02.45.1109, with over 98% of all installations currently using this version. It adds registry entry for the current user which will allow the program to automatically start each time it is rebooted. Upon being installed, the software adds a Windows Service which is designed to run continuously in the background. Manually stopping the service has been seen to cause the program to stop functing properly. It adds a background controller service that is set to automatically run. Delaying the start of this service is possible through the service manager. The primary executable is named ARCHPR.exe. The setup package generally installs about 28 files and is usually about 7.93 MB (8,319,253 bytes). Relative to the overall usage of users who have this installed on their PCs, most are running Windows 7 (SP1) and Windows 10. While about 30% of users of Proactive Password Auditor come from Germany, it is also popular in the United States and France.
Program details
URL: www.elcomsoft.com/ppa.html
Help link: www.elcomsoft.ru
Installation folder: C:\Program Files\Elcomsoft Password Recovery\
Uninstaller: MsiExec.exe /X{A903E167-3258-47D5-AE83-798FBB342F92}
(The Windows Installer is used for the installation, maintenance, and removal.)
Estimated size: 7.93 MB
Language: English (United States)
Files installed by Proactive Password Auditor
-
edpr_console.exe - Elcomsoft Distributed Password Recovery (Elcomsoft Distributed Password Recovery Console)
-
edpr_server.exe - Elcomsoft Distributed Password Recovery Server
-
epr_agent.exe - Elcomsoft Password Recovery Agent
-
GPUManager.exe - GPU Manager Utility
-
PSPR.exe - Proactive System Password Recovery
-
EFDD.exe - ElcomSoft Forensic Disk Decryptor
-
EPPB.exe - Elcomsoft Phone Password Breaker
-
wdeinfo.exe - Elcomsoft Password Recovery (Elcomsoft Distributed Password Recovery)
-
PPA.exe - Proactive Password Auditor
-
esil.dll - ElcomSoft Info Library (ESIL)
-
EWSA.exe - ElcomSoft Co.Ltd. ewsa (Elcomsoft Wireless Security Auditor)
-
ewsaserv.exe - PSPR Service (PSPRSERV)
-
ewsaserv64.exe
-
psprserv.exe
-
psprserv64.exe
-
awprhook.dll - AWPRHook (AWPRHook dll)
-
awprhook64.dll
-
awprserv.dll - AWPRSERV (AWPRSERV dll)
-
awprserv64.dll
-
ewsaserv.dll - EWSASERV (EWSASERV dll)
-
ewsaserv64.dll
-
APDFPR.exe - Advanced PDF Password Recovery
Behaviors exhibited
5 Services
- psprserv.exe runs as a service named 'PSPR Control Service' (PSPRSERV).
- psprserv64.exe runs as a service named 'PSPR Control Service' (PSPRSERV).
- epr_agent.exe runs as a service named 'Elcomsoft Password Recovery Agent' (ElcomSoftDistributedAgent).
- ewsaserv.exe runs as a service named 'EWSA Control Service' (EWSASERV).
- ewsaserv64.exe runs as a service named 'EWSA Control Service' (EWSASERV).
2 Startup Files (User Run)
- edpr_server.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'ElcomSoft DPR Server' and executes as C:\Program Files\Elcomsoft Password Recovery\Distributed Password Recovery\edpr_server.exe.
- epr_agent.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Elcomsoft Distributed Agent' and executes as "C:\Program Files\Elcomsoft Password Recovery\Distributed Password Recovery\epr_agent.exe" -s.
How do I remove Proactive Password Auditor?
You can uninstall Proactive Password Auditor from your computer by using the Add/Remove Program feature in the Window's Control Panel.
- On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
- Windows Vista/7/8/10: Click Uninstall a Program.
- Windows XP: Click Add or Remove Programs.
- When you find the program Proactive Password Auditor, click it, and then do one of the following:
- Windows Vista/7/8/10: Click Uninstall.
- Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
- Follow the prompts. A progress bar shows you how long it will take to remove Proactive Password Auditor.
OS VERSIONS
Win 7 (SP1) 59%
Win 7 5%
|
|
WHEN IT STARTS
Auto-starting? Yes
(Found in the run registry)
|
|
USER ACTIONS
 |
Uninstall it 10%
Keep it 90%
|
|
Windows
Which Windows OS versions does it run on?
| Windows 7 |
63.79% |
|
| Windows 10 |
18.97% |
|
| Windows Vista |
8.62% |
|
| Windows XP |
8.62% |
|
Which OS releases does it run on? |
| Windows 7 Ultimate |
32.14% |
|
| Windows 7 Home Premium |
23.21% |
|
| Microsoft Windows XP |
8.93% |
|
| Windows Vista Home Premiu... |
7.14% |
|
| Windows 10 Pro |
7.14% |
|
| Windows 7 Professional |
7.14% |
|
Geography
30.16% of installs come from Germany
Which countries install it?
| Germany |
30.16% |
| United States |
28.57% |
| France |
4.76% |
| Australia |
3.17% |
| Iran |
3.17% |
| Italy |
3.17% |
| United Kingdom |
3.17% |
| Hong Kong |
1.59% |
| South Africa |
1.59% |
| Brazil |
1.59% |
| Taiwan |
1.59% |
| BY |
1.59% |
| Ecuador |
1.59% |
| Mexico |
1.59% |
PC manufacturers
What PC manufacturers (OEMs) have it installed?
| Acer |
20.45% |
|
| Hewlett-Packard |
18.18% |
|
| ASUS |
11.36% |
|
| Dell |
9.09% |
|
| GIGABYTE |
6.82% |
|
| Samsung |
6.82% |
|
| Toshiba |
6.82% |
|
| Lenovo |
6.82% |
|
| Intel |
4.55% |
|
| American Megatrends |
4.55% |
|
| Sony |
2.27% |
|
| MSI |
2.27% |
|
Common models |
| HP Compaq dc5800 Microtow... |
4.88% |
|
| TOSHIBA Satellite C650 |
2.44% |
|
| Sony VPCEB3C5E |
2.44% |
|
| Samsung R720 |
2.44% |
|
| PCWARE IPMH61R1 |
2.44% |
|
| Packard Bell BV IMEDIA D9... |
2.44% |
|
About ElcomSoft Co
ElcomSoft developes Windows security and productivity applications for business and private customers.
Publisher URL: www.elcomsoft.com