Hack tool found - keygen

[Trig Wilson]

Using Norton Internet Security 2005 with Anti-virus built in.

When Norton anti-virus says Hack tool - keygen found is there
really a Trojan or virus or whatever or do they just not want
people to use keygen's. It found two that were for Norton
products but ignored keygen's for other companies products.


They were named keygen.exe.
I renamed them and they were still detected.


If I authorize adware files in the Kazaa folder to be deleted will
that cause Kazaa to stop working? I probably already know the
answer but I don't feel like testing the theory and then have to
re-install.

It did find a Trojan.Dropper virus in a keygen inside a compressed
file but I'll probably leave it alone in case I need to re-install that
product some day but how much harm can a Trojan.Dropper virus do?
Maybe I should delete it. Norton anti-virus 2003 on another computer
didn't find this.

 

[Zvi Netiv]

Using Norton Internet Security 2005 with Anti-virus built in.

When Norton anti-virus says Hack tool - keygen found is there
really a Trojan or virus or whatever or do they just not want
people to use keygen's. It found two that were for Norton
products but ignored keygen's for other companies products.

Scanning cracks to Symantec SW with their own AV is like defecating on someone's
doorstep and then ringing the bell to ask for toilet paper. As to your
question, malware is often distributed through warez sites and software.

 

[Juergen Nieveler]

When Norton anti-virus says Hack tool - keygen found is there
really a Trojan or virus or whatever or do they just not want
people to use keygen's. It found two that were for Norton
products but ignored keygen's for other companies products.

They don't claim it's a virus, they say "Hack Tool" - they don't want
you to have anything that could be used to do something illegal, it
seems.

They were named keygen.exe.
I renamed them and they were still detected.

Of course. It's detected by its signature, not by the filename.

If I authorize adware files in the Kazaa folder to be deleted will
that cause Kazaa to stop working? I probably already know the
answer but I don't feel like testing the theory and then have to
re-install.

To get rid of Adware you should use a real adware remover like AdAware
or SpyBot.

It did find a Trojan.Dropper virus in a keygen inside a compressed
file but I'll probably leave it alone in case I need to re-install
that product some day but how much harm can a Trojan.Dropper virus do?

Well, just like the name says - it will drop a trojan horse onto your
machine that obeys every command its master sends to it. Do you think
people write those keygens just because they're nice people?

Juergen Nieveler

 

[DANG]

If I authorize adware files in the Kazaa folder to be deleted will
that cause Kazaa to stop working? I probably already know the
answer but I don't feel like testing the theory and then have to
re-install.

Yes, your version of Kazaa will fail if you remove the associated adware...
however there are and have been adware free versions of Kazaa available,
for free , for a long time. (There are now dubious sites offering versions
of Kazaa lite, but for a price - avoid these!)
Here's one site I'd recommend for a truly freeware, adware-free version of
Kazaa Lite:
http://resurrection.freakin.nl/
Before you install it, completely uninstall and delete the your old Kazaa
folders, making sure you save your "My Shared Files" folder to another
location first. Then run Adaware or Spybot S&D to completely remove any
traces of the adware files. You didn't specify which version of Kazaa you
have, but I'm guessing the culprit is the "cjclint" file, which will be
simple to remove. If on the other hand, you have one of the more ancient
versions that came with "Bonzi Buddy", it will be a little more troublesome.
HTH
DANG

 

[Roger Wilco]

do?

Well, just like the name says - it will drop a trojan horse onto your
machine that obeys every command its master sends to it. Do you think
people write those keygens just because they're nice people?

To me the name suggests it is a trojan (first name) and that it drops
(second name) an unspecified other program. What you described would
probably be named more like "trojan.backdoor". Maybe the dropper trojan
does drop a backdoor trojan, or worse, who knows?