HackTool.Win32.HackAV
HackTool.Win32.HackAV or not-a-virus:Keygen (or HackTool:Win32/Keygen (Microsoft Malware Protection Center)) is the definition from Kaspersky Labs for a program designed to assist hacking. These programs often contain the signatures of potential malware, that is not dangerous by itself, but can interfere with the work on a PC, or can be used by a hacker to get some personal information from a user's computer.
According to the Microsoft Malware Protection Center, its first known detection dates back to July 16, 2009.[1]
Behaviour
This riskware is able to create license keys for illegally downloaded, non-registered software.[2] This kind of tool may appear differently, depending on what software the tool is designed to create a key for.[1] The following security threats were most often found on PCs that have been related to these tools:
- Blackhole exploit kit
- Win32/Autorun
- Win32/Dorkbot
- Win32/Obfuscator[1]
Other aliases
- RiskWare/HackAV (Fortinet)
- Troj/Keygen (Sophos)
- CRCK_KEYGEN or HKTL_HACKAV (Trend Micro)
See also
- Dorkbot
- HackTool.AutoKMS
- iframe virus
References
- ↑ 1.0 1.1 1.2 "HackTool:Win32/Keygen threat description". Microsoft. 16 July 2009. https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=HackTool:Win32/Keygen. Updated Sep 15, 2017
- ↑ "Application:W32/Keygen Description". https://www.f-secure.com/sw-desc/application_w32_keygen.shtml.
External links
- For more about this Threat, see Volume 13 of the Security Intelligence Report (.pdf download)
- Analysis of a file at VirusTotal
 |
