The WinRAR company should sue them into the ground. But of course, this will all be settled when the employee responsible for (not deleting these files) copying the files over to the disk is fired.
These aren't password recovery software but actual registration key generators and serials. Two points about suing Asus:
Firstly, it's very easy for the companies, whose software is targeted by these cracker programs in the recovery disc, to know whether or not ASUS has bought any licenses.
Secondly, even if ASUS is in the clear WRT their own use of these programs they are distributing (some clever lawyer could even argue "selling") programs designed to circunvent copy protection.
Microsoft could even sue them for unlawful disclose if those MS documents were covered by an NDA. The possibilities are endless!