Solved kms-r@1n.exe

  • Hi there and welcome to PC Help Forum (PCHF), a more effective way to get the Tech Support you need!
    We have Experts in all areas of Tech, including Malware Removal, Crash Fixing and BSOD's , Microsoft Windows, Computer DIY and PC Hardware, Networking, Gaming, Tablets and iPads, General and Specific Software Support and so much more.

    Why not Click Here To Sign Up and start enjoying great FREE Tech Support.

    This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.
Status
Not open for further replies.

icom

PCHF Member
Sep 2, 2018
10
0
79
hi there,my first post so please dont be two hard on me if i mess up.problem simple,solution not so.like some other members i have the trojan kms-r@1n.exe any help in removing this threat hi there,my first post so please dont be two hard on me if i mess up.problem simple,solution not so.like some other members i have the trojan kms-r@1nwill be highly appreciated.my os is windows 10 pro
 

Attachments

Last edited by a moderator:
Welcome to PCHF


File Search.

Get the Everything Search Engine
Install Program, Right Click Run As Admin. Type R@1n into to search window.
Then Click Edit.
Select all.
Right Click highlighted items>>>>>>>> Copy full name to clipboard. >>>>> Paste content of clipboard, here in your next reply.
 
Follow the instructions below to execute a fix on your system using FRST, and provide the log in your next reply.

  • Download the attached fixlist.txt file, and save it on your Desktop (or wherever your FRST64.exe executable is located); DO NOT open or modify that file!
  • Right-click on the FRST executable and select Run as Administrator, then select Yes;
  • Click on the Fix button;
  • On completion, a message will come up saying that the fix has been completed and it'll open a log in Notepad;
  • Please attach the Fixlog.txt in your next reply;
Security Check Scan.


  • Download Security Check to your desktop.
  • Right click it run as administrator.
  • When the program completes, the tool will automatically open a log file.
  • Please post that log here in your next post.


Next.

  • Download AdwCleaner and move it to your computer Desktop;
  • Right-click on AdwCleaner.exe and select Run as Administrator;
  • Click Yes to accept the User Account Control security warning that may appear;
  • Click on the blue button 'I AGREE';
  • Click on the Scan Now button;
  • Let the scan complete. Once it's done, make sure that every item listed is checked and click on the Clean & Repair button;
  • Click on the Clean & Restart Now button;
  • After the restart, a log will open when logging in.
  • Please attach that log in your next reply.
 

Attachments

Last edited:
Follow the instructions below to execute a fix on your system using FRST, and provide the log in your next reply.

  • Download the attached fixlist.txt file, and save it on your Desktop (or wherever your FRST64.exe executable is located); DO NOT open or modify that file!
  • Right-click on the FRST executable and select Run as Administrator, then select Yes;
  • Click on the Fix button;
  • On completion, a message will come up saying that the fix has been completed and it'll open a log in Notepad;
  • Please attach the Fixlog.txt in your next reply;
Security Check Scan.


  • Download Security Check to your desktop.
  • Right click it run as administrator.
  • When the program completes, the tool will automatically open a log file.
  • Please post that log here in your next post.


Next.

  • Download AdwCleaner and move it to your computer Desktop;
  • Right-click on AdwCleaner.exe and select Run as Administrator;
  • Click Yes to accept the User Account Control security warning that may appear;
  • Click on the blue button 'I AGREE';
  • Click on the Scan Now button;
  • Let the scan complete. Once it's done, make sure that every item listed is checked and click on the Clean & Repair button;
  • Click on the Clean & Restart Now button;
  • After the restart, a log will open when logging in.
  • Please attach that log in your next reply.
C:\Windows\System32\Tasks\R@1n-KMS
C:\Windows\System32\Tasks_Migrated\R@1n-KMS
C:\Windows\KMS-R@1n.exe
C:\Users\Ivor\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\5G09QJH3\KMS-R@1n[1].png
Follow the instructions below to execute a fix on your system using FRST, and provide the log in your next reply.

  • Download the attached fixlist.txt file, and save it on your Desktop (or wherever your FRST64.exe executable is located); DO NOT open or modify that file!
  • Right-click on the FRST executable and select Run as Administrator, then select Yes;
  • Click on the Fix button;
  • On completion, a message will come up saying that the fix has been completed and it'll open a log in Notepad;
  • Please attach the Fixlog.txt in your next reply;
Security Check Scan.


  • Download Security Check to your desktop.
  • Right click it run as administrator.
  • When the program completes, the tool will automatically open a log file.
  • Please post that log here in your next post.


Next.

  • Download AdwCleaner and move it to your computer Desktop;
  • Right-click on AdwCleaner.exe and select Run as Administrator;
  • Click Yes to accept the User Account Control security warning that may appear;
  • Click on the blue button 'I AGREE';
  • Click on the Scan Now button;
  • Let the scan complete. Once it's done, make sure that every item listed is checked and click on the Clean & Repair button;
  • Click on the Clean & Restart Now button;
  • After the restart, a log will open when logging in.
  • Please attach that log in your next reply.
hi your two far in front of me I cant follow sorry
 
Let's take it one step at a time.


Follow the instructions below to execute a fix on your system using FRST, and provide the log in your next reply.


  • Download the attached fixlist.txt file, and save it on your Desktop (or wherever your FRST64.exe executable is located); DO NOT open or modify that file!
  • Right-click on the FRST executable and select Run as Administrator, then select Yes;
  • Click on the Fix button;
  • On completion, a message will come up saying that the fix has been completed and it'll open a log in Notepad;
  • Please attach the Fixlog.txt in your next reply;
 

Attachments

Yes, now please run these two tools and let me know what issues remain.

Security Check Scan.


  • Download Security Check to your desktop.
  • Right click it run as administrator.
  • When the program completes, the tool will automatically open a log file.
  • Please post that log here in your next post.

Next.

  • Download AdwCleaner and move it to your computer Desktop;
  • Right-click on AdwCleaner.exe and select Run as Administrator;
  • Click Yes to accept the User Account Control security warning that may appear;
  • Click on the blue button 'I AGREE';
  • Click on the Scan Now button;
  • Let the scan complete. Once it's done, make sure that every item listed is checked and click on the Clean & Repair button;
  • Click on the Clean & Restart Now button;
  • After the restart, a log will open when logging in.
  • Please attach that log in your next reply.
 
downloaded security checker elsware that one ok but don't know what it does
 
From your FRST log.

2018-09-01 14:32 - 2018-09-01 15:54 - 296124416 _____ C:\Users\Ivor\Downloads\Windows 10 x64 Ent 1709 RS3 RU-en-de-uk by OVGorskiy 11.2017.iso
2018-09-01 13:29 - 2018-09-01 15:05 - 4073515008 _____ C:\Users\Ivor\Downloads\ru_windows_10_multiple_editions_version_1607_updated_jul_2016_x64_dvd_9058201.iso
2018-09-01 13:15 - 2018-09-01 21:35 - 3720216576 _____ C:\Users\Ivor\Downloads\Windows10 Home x64.iso

Where exactly did you obtain your copy of windows 10?
This forums purpose is to help members who obtained their copy of windows legitimately.
We cannot help you circumvent the activation process...
 
  • Like
Reactions: gus
when you buy something second hand you assume that you are buying legitimately,sadly that is not always the case.
 
What date did you purchase this machine?
What operating system came on the machine originally?
 
Status
Not open for further replies.