Jump to content


Photo

PUP.PSWTool.ProductKey? Is this malware?


  • Please log in to reply
4 replies to this topic

#1 ouchy

ouchy

    New Member

  • Members
  • Pip
  • 3 posts

Posted 12 July 2012 - 12:02 AM

Hello!

I ran a scan of my computer with Norton and it found nothing. I had a feeling something was up because my computer mysteriously got really slow after searching for info on random websites. I scaned with Malwarebytes and it found PUP.PSWTool.ProductKey in C:\System Volume Information.

I clicked to remove it and the program put the file in quarantine. I am wondering if this is a real virus or if it's a false positive. Should I delete it from the quarantine or just leave it there? Does anyone know what this file does?

Thanks very much in advance!

#2 ouchy

ouchy

    New Member

  • Members
  • Pip
  • 3 posts

Posted 12 July 2012 - 12:22 AM

I guess I should also add that while I was on a website, a little Java window popped up on my bottom toolbar saying something about updating or....I don't know really. I had never seen something like that before and honestly have never even noticed the Java icon down there, so I just closed Firefox immediately. I don't know if that has anything to do with it...but that's one of the reasons why I decided to scan tonight and found this.

#3 shadowwar

shadowwar

    Forum Deity

  • Moderators
  • PipPipPipPipPipPip
  • 5,222 posts
  • Gender:Male

Posted 12 July 2012 - 06:08 AM

PUP.PSWTool.ProductKey mean it detected a tool most likely used to obtain the windows product key. This is sometimes used by malware or used legitly that is why the pup detection which means Potentially unwanted program.

If you used this normally then its nothing to worry about. This was located in system restore folders so it was not actively live on the system. Did anyone or you work on the pc and needed to save the product key?
Rich Matteo
Research Engineer

staff.png

Follow us: Twitter, Become a fan: Facebook

#4 ouchy

ouchy

    New Member

  • Members
  • Pip
  • 3 posts

Posted 12 July 2012 - 06:49 AM

Did anyone or you work on the pc and needed to save the product key?


I recently had my computer cleaned up at a repair place. They wiped everything and reinstalled Windows, but I never had to give them any product key. I also haven't used a product key myself...ever.

So if I do delete this program out of the quarantine, does that mean if I have to reinstall Windows again and don't have my product key written down somewhere, I'll be out of luck and have to buy a new one? Or is this an ok thing to just delete?

#5 shadowwar

shadowwar

    Forum Deity

  • Moderators
  • PipPipPipPipPipPip
  • 5,222 posts
  • Gender:Male

Posted 12 July 2012 - 07:40 AM

ITs ok to delete. The repair place probably used to get your product key so they could do the reinstall. Its just a tool and not malicous by itself. You can just download the program again from the internet.


http://www.nirsoft.n...key_viewer.html
Rich Matteo
Research Engineer

staff.png

Follow us: Twitter, Become a fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users