Solved HackTool:win32/AutoKMS

[Python]

Can anyone please help me remove this program (HackTool) from my PC?

 

[Python]

Hello,
if it's the "offical" kmspico tool, you can go to c:\programs\kmspico (replace where it is installed) and launch uninshs.exe

kmspico is not on the PC?

 

[TwinHeadedEagle]

Hello,


This will remove it.

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.

Running it on another one may cause damage and render the system unstable.

​

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Press the Fix button just once and wait.
• If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
• When finishes FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.

 

[Python]

Hello,


This will remove it.

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.

Running it on another one may cause damage and render the system unstable.

​

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Press the Fix button just once and wait.
• If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
• When finishes FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.

Done: File attached.

 

[TwinHeadedEagle]

It is not done.

 

[Python]

Agreed - I ran Defender (full scan) again and got the same results - I've attached both the scan detail screenshot and the result after selecting 'remove' (shows an error: Error Code: 0x800700df. The file size exceeds the limit allowed and cannot be saved).

What next please?

 

[TwinHeadedEagle]

You did not perform FRST fix.

 

[Python]

I followed your instructions exactly - Downloaded the file you posted and saved to my desktop. Ran the tool as 'Administrator' and selected fix and copied the results back onto this thread.

I will do so again.

 

[Python]

Actions completed as requested and file attached.

 

[TwinHeadedEagle]

How is the situation now?

 

[Python]

Hi,

Exactly the same I'm afraid - Windows Defender finds the threat on a 'Full Scan' but cannot apply the fix (Error Code: 0x800700df. The file size exceeds the limit allowed and cannot be saved).

What next please?

 

[TwinHeadedEagle]

It is probably finding it in some archive or in System Restore, so no need to worry about it.

 

[Python]

OK - Thank you. PS. I've made a payment to your Paypal (for a pint).

Cheers.