All Threats

Viruses

Hackers

Spam

Whole site    Viruses
  
Virus Encyclopedia
Riskware
Alerts
Analysis
News
Glossary
Weblog



 
About Hackers
About Hackers

Find out more about hackers and vulnerabilities in our About Hackers and Vulnerabilities section.

About Spam
About Spam

Read about spam and spammers in our About Spam section.

 

  Home / Viruses / Virus Encyclopedia

not-a-virus:PSWTool.Win32.RAS.g

Detection added Apr 12 2008
Update released Apr 12 2008 04:06 GMT
Description added Jan 27 2009

Technical details

This hacker tool is designed to restore activation codes for Windows XP and Microsoft Office 2003. It is a Windows PE EXE file. It is 272357 bytes in size. It is packed using UPX. The unpacked file is approximately 310KB in size. It is written in C++.

Payload

This program shows the activation keys for Microsoft Windows XP and Microsoft Office 2003, making it possible to modify, print or save the keys. The program's interface is shown below:

The program also makes it possible to search the local network for Windows activation keys by giving a specific IP address or computer name.

The program makes it possible to modify the name of the registered user and the name of the organization:

Removal instructions

If your computer does not have an up-to-date antivirus, or does not have an antivirus solution at all, follow the instructions below to delete the malicious program:

  1. Delete the original program file (the location will depend on how the program originally penetrated the victim machine).
  2. Update your antivirus databases and perform a full scan of the computer (download a trial version of Kaspersky Anti-Virus).
 

Copyright © 1996 - 2010
Kaspersky Lab
Industry-leading Antivirus Software
All rights reserved
 

Email: webmaster@viruslist.com