Win7 – FaXcool.exe

Hey, guys.
I’m running a pirated version of Windows 7 64-bit on my PC and my Antivirus (Kaspersky PURE) found a problem called ‘faXcool.exe’. –> C:\Windows\Setup\scripts\faXcooL.exe
After googling it I found a forum where they said it would weaken your Windows version and it had something to do with pirated versions.
What should I do? Can I delete it without having trouble with my pirated Win7 version afterwards?
Thanks in advance,
~ Filipovic
Answer #1
run malwarebytes antimalware and clean what it finds and then reboot and see if you get the same error
Answer #2
I think that’s the key script running and will show as a hacktool
Answer #3
I found the answer. It only came up with faXcool.exe that had the Wpakill.B hacktool. A few searches on the internet and I found that it actually comes pre-loaded on a few torrented copies of Windows 7 as a means to bypass activation faXcooL.exe is a Hack tool used for disabling Windows Genuine Advantage Checksit’s safe. antiviruses report anything to do with bypassing activation of anything as a virus, but they aren’t.
Answer #4
oh i have this also, so its safe.. thanks
Answer #5
I’ve let my antivirus remove the file and everything still worked fine. faXcool.exe only runs one time, that’s when you install your pirated win7, just before the install process finishes and right before you get to the login screen for the first time. It removes the activation technologies (RemoveWAT) so windows thinks it’s activated because it cannot check if it is. So if the WAT isn’t added again afterwards (by an update or so), faXcool.exe isn’t needed anymore. So yes you can safely remove it if you want
Answer #6
Wow, totally forgot about this thread.
I must’ve read some of your answers, but totally forgot to thank you guys.
Well.. thanks a lot! I appreciate your help!
I've let my antivirus remove the file and everything still worked fine. faXcool.exe only runs one time, that's when you install your pirated win7, just before the install process finishes and right before you get to the login screen for the first time. It removes the activation technologies (RemoveWAT) so windows thinks it's activated because it cannot check if it is. So if the WAT isn't added again afterwards (by an update or so), faXcool.exe isn't needed anymore. So yes you can safely remove it if you want
Oh, alright. Thanks for that explanation. It made me understand what this is really for.
Answer #7
It’s a self-advertising thing – it runs once and does a “this is a faXcool presentation” and sets up the WAt remover and a few other little things and then stops.
It doesn’t get called again. Safe to delete.
It gets flagged as a virus becasue MS pay the virus people to include a signature for it in their AV databases.
Answer #8
No problem , glad I could help.