Jump to content

Help removing KMS-R@1n.exe and KMS-R@1nHook.dll

Recommended Posts

ahh could be, it's a family members computer, could be they - or someone they know - tried to install and crack the microsoft office.
I'm seeing online that this kms-r@in eats up cpu usage and has other ill side effects.
Will try to remove and clean office from the machine and get them a legit O365 sub or full office serial from Microsoft directly.

Is there a way I can remove this and ensure it's gone from their machine?

Thank you for the lightning fast response by the way - appreciate it :)


Link to post
Share on other sites

sure uninstalled completely already, was posting as I had found similar threads on here asking for assistance to remove this kms-r@1n and the only fix was seemingly with a fixlist/fixlog file run via FRST  to remove the remnants, so figured i would post here to see if anyone could guide me in how I can do that as well.
Not sure if you are familiar with this by chance?

Thanks again

Link to post
Share on other sites

Hello, Welcome to Malwarebytes.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.

@NeoBeum You are not authorized to reply to open logs.
Please stop immediately.
Groups authorized to help with Malware Removal for Windows Logs

@bajanpro Please follow the following instuctions.

ATTENTION: System Restore is disabled
Turn System Restore ON for Drives in Windows 10 - Immediately.

Please download the attached Fixlist.txt file to  the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.

Run FRST and click Fix only once and wait.

The Computer will restart when the fix is completed.

It will create a log (Fixlog.txt) please post it to your reply.

Please post the Fixlog.txt and let me know what problem persists.


Link to post
Share on other sites

  • Root Admin

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.



Link to post
Share on other sites

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.