Malwarebytes found the file and said it's a threat. Ran the file through Jotti's and 7 out of 19 scanners said it's a threat. Any thoughts? Thanks!
From a quick Google search I'd say... REMOVE IT!--Tom
YUp..remove it then scan your PC again with malwarebytes.Most likely your's is this one..File Name : AutoKMS.exeFile Size : 416522 byteFile Type : PE32 executable for MS Windows (GUI) Intel 80386 32-bitMD5 : cad828e8083941389e86f5b791b9031dSHA1 : 6d215f0b8d8cd77007947c447f58a952b931ed45See also»forums.mydigitallife.info/thread···./page68--Gladiator Security Forum »www.gladiator-antivirus.com/
I have this:Filename: AutoKMS.exeFile size: 446258 bytesFiletype: PE32 executable for MS Windows (GUI) Intel 80386 32-bitMD5: a351f99236a011d4027886215b843317SHA1: 03cac73f60187df5fef3aa71414e3221d65c1892Packer (Drweb): UPXPacker (Kaspersky): PE_Patch.Upolyx, UPX
I cleaned it up, rebooted and then rescan. Malwarebytes found 2 more. Are these false alarms?Filename: Msvcrt.dllFile size: 116224 bytesFiletype: PE32 executable for MS Windows (DLL) (GUI) Intel 80386 32-bitMD5: b0733802ac603fd955259f42fcb24207SHA1: a966bf7962f7874ea9892ee9bb9ed334c54276b7Packer (Drweb): UPXPacker (Kaspersky): UPXFilename: Shfolder.dllFile size: 11776 bytesFiletype: PE32 executable for MS Windows (DLL) (GUI) Intel 80386 32-bitMD5: 30a64194e2e4aa356803bc0686aa5463SHA1: dcb76a28fdcb7a3d88c0e609359d23e6e351accePacker (Drweb): UPXPacker (Kaspersky): UPX
It wouldn't hurt at all just to make sure no other problems with your computer to go through these steps, then post in the forum for further advise. »Security Cleanup FAQ »Mandatory Steps Before Requesting Assistance
This is an Office activation crack. All of the viruses report it as a keygen - it's "antipiracy" detection, not malware detection.That's AVs doing the dirty work for Microsoft - that's not security protection. That's why it's detected as a hacktool/keygen and not as a malware (from the horse's mouth).
Filename: Msvcrt.dll (280k)Filename: Shfolder.dll (22k)Those are valid system files! (I have both)I dont know what would happen if ya remove them!