Threat/Malware/Hack/?

[sixwheeler2011]

Hello Win7 ,
I also belong to the Vista forums same user name/Have 3 systems-
Vista Home premium 32bit/Win7 home 32bit/& this one Win 7 Ultimate-64bit/
& I work for A AV company lol-
Anyway

My AV recently found this .exe/threat after I had reinstalled windows(Vista to Win7 Ultimate) A 2005 system found to have the first split core /3.65/64bit/HP Pasario-
FIle: ( C:\Windows\Setup\scripts\faXcooL.exe ) Vaulted
Has anyone else seen this?
done some research found to to be a form of Malware (?Trojan) but not rootkit-or Dropper-

Any thoughts?

TY,
Sixwheeler

 

[HonorGamer]

Hey sixwheeler2011,

If you are worried about it being a virus or something give this a go:

Do a full scan of your system using: Microsoft Security Essentials - Free Antivirus for Windows

Afterwards: Malwarebytes : Free anti-malware download

If nothing pops up for both of those,

try: http://www.sevenforums.com/tutorials/166445-windows-defender-offline.html

This is what I found on the file:
faxcool.exe Info - Fix faxcool.exe Errors

 

[sixwheeler2011]

Hello,HonorGamer

I don't use MSE, to many holes.I was just wondering if anybody had any more ideas of this(Installed programs) being shown as a threat etc.
My Av has already taken care of it just was asking what it might belong to.

 

[4wd]

google it.

It only came up with faXcool.exe that had the Wpakill.B hacktool. A few searches on the internet and I found that it actually comes pre-loaded on a few torrented copies of win7 as a means to bypass activation

Windows 7 Ultimate install... Something fishy's going on...

faXcooL.exe is a Hack tool used for disabling Windows Genuine Advantage Checks

AVG Found "faxcool.exe Hacktool" And Deleted It , Should I Be Worried? - security - windows-7

 

[Golden]

Hi SixWheeler,

I have read that faxcool is a hack to bypass Windows Genuine Advantage checks. I recommend running the steps in this tutorial, and then post the results back here:

http://www.sevenforums.com/windows-...ne-activation-issue-posting-instructions.html

Regards,
Golden