not-a-virus:PSWTool.Win32.RAS.g

Technical Details

This hacker tool is designed to restore activation codes for Windows XP and Microsoft Office 2003. It is a Windows PE EXE file. It is 272357 bytes in size. It is packed using UPX. The unpacked file is approximately 310KB in size. It is written in C++.

Payload

This program shows the activation keys for Microsoft Windows XP and Microsoft Office 2003, making it possible to modify, print or save the keys. The program's interface is shown below:

The program also makes it possible to search the local network for Windows activation keys by giving a specific IP address or computer name.

The program makes it possible to modify the name of the registered user and the name of the organization:

Removal instructions

If your computer does not have an up-to-date antivirus, or does not have an antivirus solution at all, follow the instructions below to delete the malicious program:

1. Delete the original program file (the location will depend on how the program originally penetrated the victim machine).
2. Update your antivirus databases and perform a full scan of the computer (download a trial version of Kaspersky Anti-Virus).