Help removing KMS-R@1n.exe and KMS-R@1nHook.dll

[bajanpro]

 As title says, any help regarding the removal of those two files would be greatly appreciated, as they seem to be greatly increasing my CPU usage. Tried running other malware and antivirus with no result.

Farbar logs will be attached below.

Thank you in advance!!

Addition.txt FRST.txt

[bajanpro]

Yes windows 10 is fully legally activated as the pc came with windows 10 from Dell.

[bajanpro]

ahh could be, it's a family members computer, could be they - or someone they know - tried to install and crack the microsoft office.
I'm seeing online that this kms-r@in eats up cpu usage and has other ill side effects.
Will try to remove and clean office from the machine and get them a legit O365 sub or full office serial from Microsoft directly.

Is there a way I can remove this and ensure it's gone from their machine?

Thank you for the lightning fast response by the way - appreciate it



 

[bajanpro]

sure uninstalled completely already, was posting as I had found similar threads on here asking for assistance to remove this kms-r@1n and the only fix was seemingly with a fixlist/fixlog file run via FRST  to remove the remnants, so figured i would post here to see if anyone could guide me in how I can do that as well.
Not sure if you are familiar with this by chance?

Thanks again

[nasdaq]

Hello, Welcome to Malwarebytes.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

@NeoBeum You are not authorized to reply to open logs.
Please stop immediately.
Groups authorized to help with Malware Removal for Windows Logs
https://forums.malwarebytes.com/topic/12264-groups-authorized-to-help-with-malware-removal-logs/
<<<>>>

@bajanpro Please follow the following instuctions.

ATTENTION: System Restore is disabled
Turn System Restore ON for Drives in Windows 10 - Immediately.
https://www.tenforums.com/tutorials/4533-system-protection-turn-off-drives-windows-10-a.html
<<<>>>

Please download the attached Fixlist.txt file to  the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.

Run FRST and click Fix only once and wait.

The Computer will restart when the fix is completed.

It will create a log (Fixlog.txt) please post it to your reply.
===

Please post the Fixlog.txt and let me know what problem persists.

fixlist.txt

[bajanpro]

Hi there,

Have run the fix, thanks for your reply!
Will need to monitor the system tonight and see how the performance is... thank you!

Fixlog.txt

[nasdaq]

Glad we could help.

[AdvancedSetup]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Thanks