Threat Search: 

ThreatExpert's Statistics for not-a-virus:PSWTool.Win32.Messen.bh [Ikarus]:

not-a-virus:PSWTool.Win32.Messen.bh [Ikarus] is also known as:
Threat AliasNumber of Incidents
not-a-virus:PSWTool.Win32.Messen.bh [Kaspersky Lab]1,093
Generic PUP.x [McAfee]1,023
Hacktool.PassReminder [Symantec]1,023
Hacktool.PassReminder!sd6 [PC Tools]660

not-a-virus:PSWTool.Win32.Messen.bh [Ikarus] has the following possible country of origin:
OriginNumber of Incidents
Israel35

not-a-virus:PSWTool.Win32.Messen.bh [Ikarus] is known to be created as:
%ProgramFiles%\messenpass\mspass.exe
%ProgramFiles%\nirsoft\password recovery package\mspass.exe
%System%\owner.exe
%Temp%\1.tmp\mspass.exe
%Temp%\mspass.exe
%Windir%\res\msn.exe
%Windir%\se64b.dll
%Windir%\temp\ixp000.tmp\m.exe
Notes:
  • %ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.