Jump to content
unixf

Removal of KMS-R@1n (how-to?)

Recommended Posts

I ran an Application named "Activator", with the product name "Re-Loader By R@1n". I ran it for Windows as well as MS Office activation. (It's a very well recognized piracy software I guess)

How do I completely undo the process? Please help

(I have read various times, people are providing some logs, FRST.txt, Addition.txt and then someone is providing them another file to run via FRST to fix the problems)

Screenshot_57.png

Share this post


Link to post
Share on other sites

I do not see KMS-R@1n in your logs...?

Quote

Should I use Malwarebytes along with Emsisoft Anti-Malware?

If you intend having premium versions of both tools no, one or the other. Obviously I recommend Malwarebytes...

Share this post


Link to post
Share on other sites
1 minute ago, kevinf80 said:

I do not see KMS-R@1n in your logs...?

During my initial search, I deleted it from various places and ran the fixlist.txt you provided to some other member. I'm just not sure if it got removed from all the places. Can you help me regarding this? (I also noticed that it chnged my Windows PID, so I just went to the change Product Key option, entered the original one I was using previously and the PID changed back to what it was before. I just kept removing it from where ever I saw it. Some 3 files from C:/Windows too - although that fixlist script had it included I had deleted it manually before)

Share this post


Link to post
Share on other sites

Run FRST one more time:

Type the following in the edit box after "Search:".

*KMS-R@1n*

Click Search Registry button and post the log (Search.txt) it makes to your reply.

Share this post


Link to post
Share on other sites

Thank you,

Run FRST one more time:

Type the following in the edit box after "Search:".

KMS-R@1n.exe

Click Search Files button and post the log (Search.txt) it makes to your reply.

Share this post


Link to post
Share on other sites

Yes I expected that, the registry entries in earlier log are inert, they can be ignored..... Any other issues or concerns...?

Share this post


Link to post
Share on other sites

Can I still remove all those, just for the sake of my soul. If so, how?
 

Thank you very much

Screenshot (22).png

Share this post


Link to post
Share on other sites

Yes we can shift them if you want....

Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into. "Do not open that file"
NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work.

Let me see that log....

 

fixlist.txt

Share this post


Link to post
Share on other sites

Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into. "Do not open that file"
NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work.

 

fixlist.txt

Share this post


Link to post
Share on other sites

Thanks for the update, run the following to clean up...

Download "Delfix by Xplode" and save it to your desktop.

Or use the following if first link is down:

"Delfix link mirror"

If your security program alerts to Delfix either, accept the alert or turn your security off.

Double Click to start the program. If you are using Vista or higher, please right-click and choose run as administrator

Make Sure the following items are checked:

 
  • Remove disinfection tools <----- this will remove tools we may have used.
  • Purge System Restore <--- this will remove all previous and possibly exploited restore points, a new point relative to system status at present will be created.
  • Reset system settings <--- this will reset any system settings back to default that were changed either by us during cleansing or malware/infection


Now click on "Run" and wait patiently until the tool has completed.

The tool will create a log when it has completed. We don't need you to post this.

Any remnant files/logs from tools we have used can be deleted…

Next,

Read the following links to fully understand PC Security and Best Practices, you may find them useful....

Answers to Common Security Questions and best Practices

Do I need a Registry Cleaner?

Take care and surf safe

Kevin... user posted image

Share this post


Link to post
Share on other sites
12 minutes ago, kevinf80 said:

Purge System Restore <--- this will remove all previous and possibly exploited restore points, a new point relative to system status at present will be created.

What's this? 

and btw new software to delete previous ones lol

Share this post


Link to post
Share on other sites

Yes Delfix will also remove itself when complete,

Regarding System Restore, is always good practice to fully purge (delete) all old retore points and creat fresh cleam RP when we are done, this is not applicable to you as System Restore is turned off......

Share this post


Link to post
Share on other sites

Glad we could help. :)If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks!

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.