ThreatExpert's Statistics for not-a-virus:PSWTool.Win32.Messen.df [Kaspersky Lab]:

not-a-virus:PSWTool.Win32.Messen.df [Kaspersky Lab] is also known as:

Threat Alias	Number of Incidents
Hacktool.PassReminder [Symantec]	104
not-a-virus:PSWTool.Win32.Messen [Ikarus]	100
Hacktool.PassReminder [PC Tools]	80
Generic PUP.x!bt [McAfee]	70
PWCrack-MPass [McAfee]	10
Trojan.Generic [Ikarus]	5
Generic PUP.x!x [McAfee]	4

not-a-virus:PSWTool.Win32.Messen.df [Kaspersky Lab] has the following possible country of origin:

Origin		Number of Incidents
	Israel	13

not-a-virus:PSWTool.Win32.Messen.df [Kaspersky Lab] is known to be created as:

%System%\passtools\mspass.exe

%Temp%\mspass.exe

%UserProfile%\passtools\mspass.exe

Notes:

%System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
%Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).
%UserProfile% is a variable that specifies the current user's profile folder. By default, this is C:\Documents and Settings\[UserName] (Windows NT/2000/XP).