KMS Problem

[noobNEED]

Need help I’m using farbar recovery  tool not sure what to do.
Help would be highly appreciated! tried resetting my pc nothing has worked... really can’t go without my music daw! 
bless! 

[Maurice Naggar]

Hi, 

My name is Maurice. I will be helping and guiding you, going forward on this case.

Let me know what first name you prefer to go by.

 

Please follow my directions as we go along.  Please do not do any changes on your own without first checking with me.

 

The Microsoft Safety Scanner  is a free Microsoft stand-alone virus scanner that  can be used to scan for & remove malware or potentially unwanted software from a system.

The download links & the how-to-run-the tool are at this link at Microsoft

https://docs.microsoft.com/en-us/windows/security/threat-protection/intelligence/safety-scanner-download

 

Let me know the result of this.

The log is named MSERT.log 

the log will be at  C:\Windows\debug\msert.log

Please attach that log with your reply.

 

[noobNEED]

Hello my name is Jr. thanks Maurice for the help really appreciate it 🙂  

msert.log

[Maurice Naggar]

Hello Jr.

That for the report from the Microsoft Safety Scanner.  That is a good start.

Lets follow up with this.

I  would suggest to download, Save, and then run Malwarebytes ADWCLEANER.

Please close Chrome and all other open web browsers after you have saved the Adwcleaner and before you start Adwcleaner scan.

Adwcleaner  detects factory Preinstalled applications too!

 

Please download  Malwarebytes AdwCleaner  https://downloads.malwarebytes.com/file/adwcleaner
 

Be sure to Save the file first, to your system.  Saving to the Downloads folder should be the default on your system.

 

Go to the folder where you saved Adwcleaner. Double click Adwcleaner  to start it.

At the prompt for license agreement, review and then click on I agree.

 

You will then see a main screen for Adwcleaner. ( if you do not see it right away, minimized the other open windows, so you can see Adwcleaner).

Then click on Dashboard button.

Click the blue button "Scan Now".

 

allow it a few minutes to finish the Scan.   Let it remove what it finds.

NOTE:  When it comes to the section "

Pre-installed applications

 

You can skip that.

Please find and send the Adwcleaner "C" clean report.

In Adwcleaner, click the "Reports" button.  Look at the list of reports for the latest date & type "Clean".

Double Click that line & it will open in Notepad.   Save the file to your system and then Attach that with your reply.

 

That C clean report will be the one with the most recent Date and time at folder  C:\AdwCleaner\Logs

Thanks.  Keep me advised.

 

 

[noobNEED]

thanks ,alright here's the file 🙂

AdwCleaner[C01].txt

[Maurice Naggar]

Thank you for the report.  That has done some cleanup of a few adwares.

Does this pc have Malwarebytes for Windows installed ?    Please let me know if it does not.   Just stop and let me know if that is so.

 

Start Malwarebytes for Windows.

In the program, click the Settings ( gear ) icon. Look for the General tab.

 

Then click on the button "Check for Updates". Have lots of patience.

Then click the small x to get back to main screen.

 

On the main screen, click the blue button Scan now.

 

When the scan phase is done, be real sure you Review and have all detected lines items check-marked on each line on the left. That too is very critical.

You can actually click the topmost left  check-box  on the very top line to get ALL lines  ticked   ( all selected).

 

Then click on Quarantine selected.

Then, locate the Scan run report;  export out a copy;  & then attach in with your  reply.

See https://support.malwarebytes.com/hc/en-us/articles/360038479194-View-Reports-and-History-in-Malwarebytes-for-Windows-v4

 

Let me know how it goes.

[noobNEED]

Just checked I do have it installed ,so I ran scan after that do I head to detection history and restore all quarantined items?

[noobNEED]

or would you like me to send u scan reports before doing that?

[Maurice Naggar]

Do not do anything on the Quarantine area.

I am just looking for a completed scan and to have it quarantine all that it tagged.   when done,  then attach a copy of the completed scan run.

Like in the link above.

I am working other cases   ( one is in a bad pinch)  so I will be delayed in getting back to this case here.

 

[noobNEED]

alright no problem totally understand Maurice ill be patiently waiting 🙂  here's the most current scan log  report I've done.

4.txt

[Maurice Naggar]

The Scan report is all good.  Thanks.   We just want to be sure that the Malwarebytes for Windows will now have the very latest Component.

Do a update run this way.

Start Malwarebytes for Windows.  Click the Settings ( gear ) icon at the top right.  Then look on the GENERAL tab.

There, click on "Check for Updates"  and let it proceed and update.  Follow all prompts.

The latest component is 1.0.979

Then close Malwarebytes for Windows.

.

I would suggest a free scan with the ESET Online Scanner

Go to https://download.eset.com/com/eset/tools/online_scanner/latest/esetonlinescanner.exe

 

It will start a download of "esetonlinescanner.exe"

Save the file to your system, such as the Downloads folder, or else to the Desktop.

 

Go to the saved file, and double click it to get it started.

 

When presented with the initial ESET options, click on "Computer Scan".

Next, when prompted by Windows, allow it to start by clicking Yes

When prompted for scan type, Click on Full scan

Look at & tick  ( select )   the radio selection "Enable ESET to detect and quarantine potentially unwanted applications"   and click on Start scan button.

Have patience.  The entire process may take an hour or more. There is an initial update download.

There is a progress window display.

You should ignore all prompts to get the ESET antivirus software program.   ( e.g.  their standard program).   You do not need to buy or get or install anything else.

When the scan is completed, if something was found, it will show a screen with the number of detected items.  If so, click the button marked “View detected results”.

Click The blue “Save scan log” to save the log.

If something was removed and you know it is a false finding, you may click on the blue ”Restore cleaned files”  ( in blue, at bottom).

Press Continue when all done.  You should click to off the offer for “periodic scanning”.

 

 

[noobNEED]

alright malwarebytes is up to date and I got eset program and did as you instructed heres log file from it 🙂 

scan log-eset.txt

[Maurice Naggar]

Thanks for the ESET scan report.   It found 1 item, tagged as a in32/Kryptik.HETN trojan   & has removed it.

I would very much like to have a report from the tool known as FRST so that we can see some details of what may be going on.

I would like to have you run a report tool known as FRST. This has no personal information. It is a well-known & widely used &safe.
FRST will help provide me with a list of installed programs and other information about your computer that will help me see if there are any other problems that are not being detected. Please follow the steps below to run FRST.
 

Please download FRST from the link below and save it to your desktop:

"Download link for 64-Bit Version Windows"

Please wait and look toward the top or bottom of your browser for the option to Run or Save.
Click Save to save the file  to the Downloads folder.

Run report with FRST64.     Go to the Downloads folder.

Right-click on FRST64 icon and select Run as Administrator to start the tool , and reply YES to allow it to proceed and run.

Approve the Windows UAC prompt on Windows Vista and newer operating systems by clicking on Continue or Yes. 

Click Yes when the* disclaimer* appears in FRST.
The tool may want to update itself - in that case you'll be prompted when the update is completed and ready to use.

Make sure that Addition options is *checked* - the configuration should look exactly like on the screen below (do not mark additional things unless asked).
Press Scan button and wait.

 

 

 

The tool will produce 2  logfiles on your desktop: FRST.txt , Addition.txt 
Click OK button when it shows up. Close the Notepad windows when they show on screen. The tool saves the files.

Please attach these 2 files to your next reply.

[Maurice Naggar]

This is to advise you to NOT post on other customer's  Topics / threads.   You had just posted on someone else's case.

That is NOT acceptable.

and Please only stick to your topic here.   Furthermore, at present it is way late on my Friday evening.   And I will be signing Off soon.

Please know I am just a volunteer.   I do not get paid for this.  I am not on 24 x 7.

I would much appreciate it if you could have patience.

[noobNEED]

alright heres both files 

Addition.txt FRST.txt

[noobNEED]

and im really really sorry really aprecciated the help ill be patient again sorry for being impatient.

[Maurice Naggar]

Hello @noobNEED    Where is it that you may be seeing some "KMS" ?  If you see it, where is it located ?

These reports do not have a "kms". 

[noobNEED]

i used kms activator to activate windows but now it wont let me update or anything ..... 

i keep getting error code (0x80070424)

[Maurice Naggar]

You are more than likely just a home-type computer owner.   Did you buy this computer new ?

It would have come preloaded & all setup with a licensed copy of Windows.

I do not understand why one would have tried using a "auto-activator".   But in any event, we here can not help on Windows licensing glitches.

Microsoft has a free help form for all kinds of Windows issues, and specifically on licensing.

See https://answers.microsoft.com

Create your own help=post there.  Do not piggy-back-post onto a pre-existing post.

.

From what you just wrote & looking back on your 1st post

tried resetting my pc nothing has worked

as long as the Windows license-activation is glitched up,  one cannot even use the Windows 10 Reset option because of that condition.

.

Look all around your computer case.  Do you see a computer manufacturer's Certificate of Authenticity  that also has the License KEY ?

[  just do not post the actual key here or anywhere else in public venue ]

If you see that License Key, be sure you write that down and keep it very safe.   and if you got it, then it is possible to do a brand new fresh install of Windows.  at no cost.

Most all modern manufactured computers come with such a sticker.   If not, check with the manufacturer of this computer hardware.

 

[noobNEED]

i dont think I'm explaining myself good enough what im tryna say is I got a cracked windows activator and it messed up my computer... 

what I wanna do is just go back to the free version can you help? 

 

[Maurice Naggar]

What cracked windows activator did you use ?   from where ?

You are likely going to need to find your actual original Windows license  and then do a fresh new install of Windows.

There is not a magical one-click / easy do it all cure for what this pc's Windows is at.

This is a malware removal help forum.

Look around your computer case for a Certificate of Authenticity.   if you do not find it, say so.

[noobNEED]

I bought cracked windows activator on ebay ... and it said kms activator ? 

I wasn't able to find certificate of authenticity. pc build came with free version of windows 

 

[Maurice Naggar]

What brand-name is the computer ?   The support site for the pc-maker should be helpful in helping you find the License, or else, they can guide you to how to do a Factory Restore operation off of the drive  and that would set the machine back to Original factory state.  Like day 1 it came off the assembly line.

That would include getting back the original good fresh Windows operating system.

 

<soapbox>  blast ebay !   why do folks go on ebay and do that kind of 'stuff' ?    </soapbox>

[Maurice Naggar]

As stated previously, a Factory Restore is your best hope to get back the original Windows operating system.  If you have a offline Full Backup of your system from before the start of the install of the "cracked" app, then you should be able to restore from that backup.

If not, then you will need to re-install your application programs, after insuring to do a Microsoft Windows Update run.

Since it is not possible to otherwise get your Windows activation  ( if you do not have its License Key at hand) I am marking this case for closure.

Backup is your best friend.  Keep backups of your system on a regular basis to offline storage & keep those safe. https://forums.malwarebytes.com/topic/136226-backup-software/

It is not enough to just have a security program installed. Each pc user needs to practice daily safe computer and internet use.

Best  practices & malware prevention:
Follow best practices when browsing the Internet, especially on opening links coming from untrusted sources.
First rule of internet safety: slow down & think before you "click".
Never click links without first hovering your mouse over the link and seeing if it is going to an odd address ( one that does not fit or is odd looking or has typos).

Free games & free programs are like "candy". We do not accept them from "strangers".

Never open attachments that come with unexpected ( out of the blue ) email no matter how enticing.
Never open attachments from the email itself. Do not double click in the email. Always Save first and then scan with antivirus program.

Pay close attention when installing 3rd-party programs. It is important that you pay attention to the license agreements and installation screens when installing anything off of the Internet. If an installation screen offers you Custom or Advanced installation options, it is a good idea to select these as they will typically disclose what other 3rd party software will also be installed.
Take great care in every stage of the process and every offer screen, and make sure you know what it is you're agreeing to before you click "Next".

Use a Standard user account rather than an administrator-rights account when "surfing" the web.
See more info on Corrine's SecurityGarden Blog http://securitygarden.blogspot.com/p/blog-page_7.html
Dont remove your current login. Just use the new Standard-user-level one for everyday use while on the internet.

 
Do a Windows Update.

Make certain that Automatic Updates is enabled.
https://support.microsoft.com/en-us/help/12373/windows-update-faq

Keep your system and programs up to date. Several programs release security updates on a regular basis to patch vulnerabilities. Keeping your software patched up prevents attackers from being able to exploit them to drop malware.

For other added tips, read "10 easy ways to prevent malware infection"

 

Stay safe.  I wish you all the best