autokms.exe an office crack or a trojan?

[Marco2]

After I installed Qihoo360 and MBAM free on my friend's windows 7 laptop that was unprotected for a long time, MBAM found nothing, while Qihoo found this
Virus scan result
----------------------
"c:\windows\autokms\autokms.exe Applications recommended to forbid to auto run when Windows starts up" I looked it up on Google and found all kinds of explanations that varied from a Microsoft Office crack to a dangerous backdoor/trojan. False alarm or serious threat?

 

[Mr.X]

False positive. It's a component of MTK (Microsoft Toolkit), a well-known activator for several M$ products.
http://forums.mydigitallife.info/th...-Official-KMS-Solution-for-Microsoft-Products

Although we can't dismiss the possibility of a fake and harmful MTK executable. But again, the original harmless one could make A/V programs to raise the red flags because A/V firms actually unite along with M$ to fight against piracy.

 

[Ink]

Upload to VirusTotal, post report here.

 

[Piteko21]

Maybe a false positive, some cracks can expose the system like a backdoor. be carefull.

 

[yigido]

Crack > It is not a good thing. People invest their money to develop the softwares and they want your money for this. You do not want to pay but you want to use their software. Sorry but they do not want allow this. You are trying to "crack" it to use. It is not ethical.
Trojan > Who knows it is trojan or not. VT reports cannot say sometimes everything. Remember 0/56 FUD samples

These 2 terms are not good things. So please use free softwares! I am against cracks & warez.. etc.
I can suggest you to use LibreOffice. It is very good software for home and small offices to maintain their files.
You don't have to pay for it. If you want to thank them, you can donate very small amount of your money.
AutoKMS also against Piracy Policy of MT.

 

[jamescv7]

Unfortunately AutoKMS is designed for 'crack' Office based on Microsoft Answers' post, you need to expect that AV's are design to detect those activator within erroneous detection or not because of its operation to activate MS Office illegally. (some may contains bundled malicious programs)

Discretion is advise however better stay away from that.

 

[WinXPert]

can you post a copy of "c:\windows\autokms\autokms.exe"

 

[Ink]

Reading the posts and some research on Google, AutoKMS is used to bypass Office software activation.

For that reason, thread will be closed as per Forum Rules.

3. No inappropriate content.

• + No warez, cracks, serials or illegally obtained copyrighted content is allowed.
• + Encouraging the use of illegally obtained content is not allowed.
• + We do not allow discussions involving Code for Hacking, Cracking, Bypassing, Exploiting or other forms of malware.
• As we are a Security and Technology based Forum, if we see any of the above, we reserve the right to remove or moderate such topics.

http://malwaretips.com/pages/rules/