Jump to content

infected after using ms toolkit 2.6.3


Recommended Posts

  • Root Admin

Hello @kramer and :welcome:

The logs don't show any obvious signs of an infection. The computer is running a hack to bypass activation from Microsoft and is using P2P software which can easily help lead to an infection. I would recommend against their use.

qBittorrent
AutoKMS

The AutoKMS is crashing on the computer too.

Error: (11/27/2017 05:49:01 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: AutoKMS.exe, version: 2.6.3.0, time stamp: 0x59fdb6af
Faulting module name: KERNELBASE.dll, version: 10.0.16299.15, time stamp: 0x4736733c
Exception code: 0xe0434352
Fault offset: 0x0000000000013fb8
Faulting process id: 0x2660
Faulting application start time: 0x01d367972888287e
Faulting application path: C:\WINDOWS\AutoKMS\AutoKMS.exe
Faulting module path: C:\WINDOWS\System32\KERNELBASE.dll
Report Id: 2666ddb6-d8e0-445a-9be3-e7aeec110792
Faulting package full name: 
Faulting package-relative application ID:

 

Link to post
Share on other sites

  • Root Admin

This should remove KMS

Please download the attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST or FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system.

Run FRST or FRST64 and press the Fix button just once and wait.
If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach or post it to your next reply.

Note: If the tool warned you about an outdated version please download and run the updated version.

 

fixlist.txt

 

Thanks

Ron

 

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.