Home Malware Programs Malware HackTool:Win32/Wpakill.B

HackTool:Win32/Wpakill.B

Posted: July 14, 2011

HackTool:Win32/Wpakill.B is a malicious program that attacks your Windows Security settings by blocking various processes and modifying system files without your permission. Most HackTool:Win32/Wpakill.B attacks center on altering, deleting or stopping software license-related files, validation features and anti-piracy programs. Although the direct harm from HackTool:Win32/Wpakill.B may be minimal, HackTool:Win32/Wpakill.B may cause instability in programs that require the above functions to run and may be an initial step in other attacks that could be launched against your PC. Removing HackTool:Win32/Wpakill.B with trustworthy anti-malware software is strongly encouraged.

How HackTool:Win32/Wpakill.B Makes a Fool Out of WAT

HackTool:Win32/Wpakill.B is a recent 2011-age program that tries to skirt around the features of Windows Activation Technologies or WAT. WAT is only present in Windows 7; as such, the presence of HackTool:Win32/Wpakill.B on a non-Windows 7 computer is less threatening although HackTool:Win32/Wpakill.B may still cause some damage.

Unlike some malicious security programs, such as rogue software or adware, HackTool:Win32/Wpakill.B may not show any visible symptoms besides triggering your anti-virus and security software. HackTool:Win32/Wpakill.B doesn't launch itself and must be run to function, although another harmful program, such as a Trojan, may be able to execute HackTool:Win32/Wpakill.B without your permission.

Once HackTool:Win32/Wpakill.B is launched, HackTool:Win32/Wpakill.B will alter Windows in the following ways:

  • HackTool:Win32/Wpakill.B will delete the WLMS or Windows License Monitoring Service.
  • Other components, all of which are included with some types of Windows 7 by default, will be disabled instead of deleted. These targets of HackTool:Win32/Wpakill.B's wrath include user32.dll, slwga.dll, SLUI.exe, WatAdminSvc.exe, systemcpl.dll, Systemcpl.dll, sppcomapi.dll, WatWeb.dll and WatUX.exe. Most of these files are related to software licensing features.
  • HackTool:Win32/Wpakill.B also disables the Sppsvc service, which, once again, is linked to software licensing and activation. Sppsvc's automatic startup process will be turned off by HackTool:Win32/Wpakill.B, although you should be able to turn this process back on after dealing with HackTool:Win32/Wpakill.B.
  • Finally, HackTool:Win32/Wpakill.B will disable certain scheduled tasks that involve software validation.

Why HackTool:Win32/Wpakill.B Isn't Something to Keep Around on Your PC

Programs that require the above files, features and processes to function, may become unstable or cease to function due to HackTool:Win32/Wpakill.B's changes. You'll also experience an inability to download, update or maintain various software licenses since HackTool:Win32/Wpakill.B has neatly hamstrung every baseline program that's responsible for those functions.

Due to these issues, it's strongly encouraged that you remove HackTool:Win32/Wpakill.B from your PC if you haven't done so already. Total deletion of HackTool:Win32/Wpakill.B can be insured by using appropriate threat-removal software. You may also need to use Safe Mode to make sure that HackTool:Win32/Wpakill.B isn't running while you're trying to delete HackTool:Win32/Wpakill.B.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 baauteb.exe
    2 Blackout RO.exe
    3 btwdiw32.dll
    4 kelebek.exe
    5 mswsock.dll
    6 questscan143.exe
    7 removewat.exe
    8 TCPIE.dll
    9 teavv.dll
    10 ursxd.dll
    11 widmoa.dll
    12 windows32.exe
Loading...