Microsoft security software detects and removes this threat.

This is a tool that tries to activate or "crack" Windows 7 and Windows Vista installations.

Find out ways that malware can get on your PC.  

What to do now

Use the following free Microsoft software to detect and remove this threat:

You should also run a full scan. A full scan might find hidden malware.

Get more help

You can also visit our advanced troubleshooting page or search the Microsoft virus and malware community for more help.

If you’re using Windows XP, see our Windows XP end of support page.

Threat behavior

This tool tries to activate illegal versions of Windows 7 and Windows Vista.

The tool can be included in a RAR archive that contains files with names like oem.exe and others that are specific to PC manufacturers. The user interface might look like this:

Analysis by Jim Wang


Alerts from your security software may be the only symptom.


Alert level: Medium
First detected by definition: 1.105.593.0
Latest detected by definition: and higher
First detected on: May 26, 2011
This entry was first published on: May 26, 2011
This entry was updated on: Sep 21, 2015

This threat is also detected as:
No known aliases