Hacktool:win32/Productkey???

Aidanmc

I just did a full scan on my laptop and it returned the following 'threat'.

What is it and do i need to remove it? Just wondering if it has something to do with when i  clean installed windows 10 from windows 7 using gatherostate method to keep licence?

Thanks

Neil_Jones

gatherostate method?

Sorry I don't quite follow?

Aidanmc

Neil_Jones said:

gatherostate method?

Sorry I don't quite follow?

It was a way to clean install win 10 and keep licence activated.

I can't really explain it too well, this is how it was done.

https://www.ghacks.net/2015/08/30/how-to-clean-install-windows-10-directly-without-upgrade/

Neil_Jones

But.... that method was superseded in later Windows 10 installations when you could install 10 with a Windows 7 or 8  key regardless of whether you'd had 10 on the machine or not.  In fact it was changed with the release of November 2015, so the method you've linked to is effectively obsolete.  Once you've got 10 on the computer you have a digital licence for the rest of the life of the device.

Aidanmc

I done it around sept/oct 2019 following some advice on here. Worked ok

Regarding this Hacktool:win32/productkey, do you know what this may be or why its classed a threat?

I quarantined it anyhow.

forgotmyname

Windows own tool to read the Windows 7 product key was on the blacklist at one point.

Its their own tool and they deemed it a threat?   It only found the product code and made no changes.

Aidanmc

forgotmyname said:

Windows own tool to read the Windows 7 product key was on the blacklist at one point.

Its their own tool and they deemed it a threat?   It only found the product code and made no changes.

Maybe that's what it is then.

HereToday

Neil_Jones said:

But.... that method was superseded in later Windows 10 installations when you could install 10 with a Windows 7 or 8  key regardless of whether you'd had 10 on the machine or not.  In fact it was changed with the release of November 2015, so the method you've linked to is effectively obsolete.  Once you've got 10 on the computer you have a digital licence for the rest of the life of the device.

You just made all that up.
Of course it has not been superseded; it's just another method of upgrading to Windows 10 via a clean install. 
There are instances wherein you would use it in preference to entering the product key on the device and also as a belt & braces approach. 
Sometimes the key on the device isn't visible or available. Again gatherosstate/Genuine Ticket would be the preferred method.

I use it as a matter of course.

HereToday

Aidanmc said:

I done it around sept/oct 2019 following some advice on here. Worked ok

Regarding this Hacktool:win32/productkey, do you know what this may be or why its classed a threat?

I quarantined it anyhow.

You can always take it out of Quarantine and inspect it. Likely something harmless like a key reader. Cannot see you downloading a hack when you are already activated. 

cooltt

Aidanmc said:

I just did a full scan on my laptop and it returned the following 'threat'.

What is it and do i need to remove it? Just wondering if it has something to do with when i  clean installed windows 10 from windows 7 using gatherostate method to keep licence?

Thanks

It's malware if you haven't downloaded any cracked software.

Can be used to install lots of nasty things on your PC but currently being used to hijack your PC to mine cryptocurrency without your knowledge.

Quarantine and remove it, plenty of guides online on how to do this. Back up anything important before you start.

John_Gray

You might perhaps have misspelled "produkey.exe" (not productkey) from NirSoft / Nir Sofer's system tools?  This is a perfectly valid and very helpful tool.