1. A method, performed on a processing device, for detecting an activation exploit, the method comprising: executing, by at least one processor of the processing device, at least one detection module, each of the at least one detection module being specific for detecting a respective known activation exploit or a respective class of activation exploit, the respective known activation exploit or the respective class of activation exploit being for deceiving authentication components, such that a counterfeit copy of software is authenticated as a genuine copy of the software; executing, by the at least one processor of the processing device, at least one response module, each of the at least one response module includes response logic for performing a corresponding action in response to detecting the respective known activation exploit or the respective class of activation exploit; and executing, by the at least one processor of the processing device, a scanner, which uses an exploit data file, the at least one detection module, and the at least one response module, the exploit data file including information regarding at least one known activation exploit.