Operating System Infection Rates: Application Vulnerabilities & Exploits Trend Up, In

This is very interesting.

 

very nice find, thank you for sharing

 

So is win.32/keygen the keygens you find in warez software? How are they exploitable? Isn't it just a number generator with a pretty gfx interface?

 

They are user "self inflicted" (user's fault). Key gens themselves are usually not malicious, but they are commonly bundled with malware. Typically user downloads pirated software, and uses the packaged key gen in hopes to generate a key for the software.

-http://blogs.technet.com/b/security/archive/2012/10/09/microsoft-security-intelligence-report-volume-13-now-available.aspx

 

If you ever do use a keygen I think Sandboxie is likely the best approach for it. Run it in a box with no internet restrictions and limit the reads even.

Same goes for patches (people use them for pirated games), run it in a sandbox that only can write to the areas it needs to.