Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

KMSpico


  • This topic is locked This topic is locked
5 replies to this topic

#1 Langell

Langell

  • Members
  • 9 posts
  • OFFLINE
  •  

Posted 26 August 2017 - 11:09 AM

Hi. A few days ago, a friend tried to active my office 2013 using kmspico, but we didn't realized it was a virus...

 

It was not activated, and now i'm having a lot of problems.

 

I tried installing and running a few anti-virus but it won't let me.

 

I tried to return to a recovery points but it won't let me do this either..

 

I'm using win 8.1 x64.

 

How should i proceed ?

 

Thanks in advance.

 

*Edit1

 

The prompt appear and disappear a lot, every 3 or 4 minutes

Everytime i click on my google chrome, oppens a random website

And sometimes when i try to acces any site it appears like i'm not connected, but after a few 'f5', it works..

 

 

 


Edited by Langell, 26 August 2017 - 11:14 AM.


BC AdBot (Login to Remove)

 


#2 Daniel_Boringcliffe

Daniel_Boringcliffe

  • Members
  • 85 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:somewhere deep in the heart of Europe
  • Local time:09:05 PM

Posted 26 August 2017 - 11:40 AM

reinstall windows and don't attempt to use fake trojan crap like that ever again

#3 Langell

Langell
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  

Posted 26 August 2017 - 11:46 AM

 

reinstall windows and don't attempt to use fake trojan crap like that ever again

 

I won't attempt to do any of this again, i learned from this. I'm ready to pay for the things that i need from now on.

But i'm trying to find a way to get rid of it, without having to install windows again.

I have almost 10 days of files without backup.

Currently i'm runing frst to post the logs here, i saw a few topics like mine where they were able to clean without reinstalling windows.

I'm hoping that someone can help.

#4 Daniel_Boringcliffe

Daniel_Boringcliffe

  • Members
  • 85 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:somewhere deep in the heart of Europe
  • Local time:09:05 PM

Posted 26 August 2017 - 11:48 AM

Well, your safest bet is to reinstall, if you can boot it up then simply back up all of your stuff, then reinstall it. And for heaven's sake, don't use KMS cracks ever again, almost all of them are malware. Also don't ignore your AV. This guy https://www.bleepingcomputer.com/forums/t/655349/infected-with-malware-from-fake-km-spico/?p=4320061 is apparently having the same problems, you can check his thread too.


Edited by Daniel_Boringcliffe, 26 August 2017 - 11:52 AM.


#5 Daniel_Boringcliffe

Daniel_Boringcliffe

  • Members
  • 85 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:somewhere deep in the heart of Europe
  • Local time:09:05 PM

Posted 26 August 2017 - 12:01 PM

If you insist on trying to remove all of the crap that came in with kmspico then you can try to boot into safe mode / run rkill and run the following : JRT, Adwcleaner, Malwarebytes, perhaps Zemana

 

No guarantee that it'll work but it is worth of a try I guess, here are the links

 

https://download.bleepingcomputer.com/dl/0aa62c6351631968c0d8f135886d44ec/59a1a8e2/windows/security/security-utilities/j/junkware-removal-tool/JRT.exe

https://toolslib.net/downloads/finish/1-adwcleaner/1032/get/IOmXaT9EDVFiFSinZQVFI9TZ3GypuyAp/

https://www.bleepingcomputer.com/download/malwarebytes-anti-malware/dl/344//

https://zemana.com/en-US/ThankYou/Download?source=download&ProductID=2&IsFree=False&IsPortable=True

 

But even if it does, do not count your system as trustworthy. If there are any advanced rootkits present then the above mentioned programs won't help much. 

 

If you are a poor student or something similar and insist on having win10 without paying then search for something that does not involve kms cracks and never trust anything that wants you to disable / ignore your AV. Nothing good ever comes out of that. 


Edited by Daniel_Boringcliffe, 26 August 2017 - 12:06 PM.


#6 hamluis

hamluis

    Moderator


  • Moderator
  • 56,286 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:03:05 PM

Posted 27 August 2017 - 07:29 AM

I split the FRST log data into a new topic in the Malware Removal Logs Forum.  New topic:  https://www.bleepingcomputer.com/forums/t/655432/installed-kmspico-system-problems/#entry4320097 .

 

Please follow any instructions provided by MRT personnel in that topic.

 

This Am I Infected topic is now closed to avoid confusion.

 

Louis


Edited by hamluis, 27 August 2017 - 07:34 AM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users