Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


friend gave me copy of kmspico, got a virus

  • This topic is locked This topic is locked
2 replies to this topic

#1 Danktheory


  • Members
  • 2 posts
  • Local time:11:43 PM

Posted 22 August 2017 - 02:23 PM

Pretty much the title. I was given a copy of kmspico by a friend and was told that he used it the night before and everything worked fine. I opened the installer, and it prompted me to open a link to receive a password to continue. I promplty closed the installer due to the fishy nature of the whole password thing, and immediately a bunch of applications began installing, and ads popping up. attempted to system restore to a past point, and it would not allow me to, giving me an error code 0x80070091.

I've read some recent posts on this forum about the same issue, so i have done some work in advance for it.


I ran malware bytes, here is the log:


# AdwCleaner - Logfile created on Tue Aug 22 19:19:22 2017
# Updated on 2017/05/08 by Malwarebytes 
# Database: 08-17-2017.2
# Running on Windows 10 Home (X64)
# Mode: scan
***** [ Services ] *****
No malicious services found.
***** [ Folders ] *****
No malicious folders found.
***** [ Files ] *****
No malicious files found.
***** [ DLL ] *****
No malicious DLLs found.
***** [ WMI ] *****
No malicious WMI found.
***** [ Shortcuts ] *****
No malicious shortcuts found.
***** [ Tasks ] *****
No malicious tasks found.
***** [ Registry ] *****
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\{94ebd7b5-82ae-449t-b679-3d04078ed154}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Speedownloader0099
PUP.Optional.DiskPower, [Key] - HKLM\SOFTWARE\Microsoft\{6711eba6-cf08-4edw-9528-86004fa424bb}
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries.
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries.
C:/AdwCleaner/AdwCleaner[C0].txt - [4251 B] - [2017/8/22 18:59:32]
C:/AdwCleaner/AdwCleaner[S0].txt - [4783 B] - [2017/8/22 18:58:9]
########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt ##########

Edited by hamluis, 22 August 2017 - 02:43 PM.
Moved from MRL to Am I Infected - Hamluis.

BC AdBot (Login to Remove)


#2 Danktheory

  • Topic Starter

  • Members
  • 2 posts
  • Local time:11:43 PM

Posted 22 August 2017 - 02:47 PM

No need to reply to this, I ended up deciding to wipe the pc entirely and start over.

Edited by Danktheory, 22 August 2017 - 09:55 PM.

#3 boopme


    To Insanity and Beyond

  • Global Moderator
  • 73,490 posts
  • Gender:Male
  • Location:NJ USA
  • Local time:06:43 PM

Posted 23 August 2017 - 12:29 PM

Thanks for letting us know!
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users