Even if the tool from Ratiborus (a pseudonymous Russian developer) were clean, most download sites repack it with additional malware. Moreover, the very act of disabling security software to run these tools creates vulnerabilities that other malware can exploit.

by Ratiborus is a well-known unofficial activation tool for Microsoft products (Windows and Office). It works by emulating a KMS (Key Management Service) server on your local machine, tricking Microsoft software into thinking it's activated through a legitimate volume licensing channel.

– Simple and effective KMS activator.

Once detected, Microsoft can: