Just wanted to give everyone that a oldie but a goodie is rearing its head again. I will mask itself as security software for you to update your own. Its malware with a bite to it. I have not seen this in about a year, so i am not sure of its new abililities, however AVG picked it up this am, and was able to remove it. I would also suggest a clean up program call
cleanup
It resides in C:\windows\kmsact.exe and comes with its own keygen attached, so chances are its looking for operating information and keys to use, but none the less be on the look out for any monkey business.
kmsact.exe description : The filename kmsact.exe was last seen on 07.12.2010, and it is considered as unsafe. Threat name Malware Filename [System32Root]\kmsact.exe Filesize Unknown Last seen 07.12.2010 Status Known to RemoveIT Pro as unsafe. This file can perform following behavior. - File is created as process on the disk. - This process can create, delete or modify files on the disk.
should you see any un usual activity, please scan you pc with updated anti virus and anti spyware and anti malware as this is malware. If at that point you are not confortable. do the following, again keep in mind this is more advanced if you have allowed it to install.
1. Temporarily Disable System Restore, Reboot computer in SafeMode;
2. Locate kmsact.exe virus files and uninstall kmsact.exe files program. Follow the screen step-by-step screen instructions to complete uninstallation of kmsact.exe.
3. Delete/Modify any values added to the registry related with kmsact.exe,Exit registry editor and restart the computer; ( hkey_users\.default\software\winrar sfx )
4.Clean/delete all kmsact.exeinfected file(s):kmsact.exe and related,or rename kmsact.exe virus files;
5.Please delete all your IE temp files with kmsact.exe manually,run a whole scan with antivirus program ;
as always of you have any question please feel free to ask. I will be posting something about the iTunes issues in a little bit as well as a few of our brothers have been effected by it.
**** please be advised this is my opinion, methodology's and doesn't reflect on this site, or its proprietor what so ever *******
Threaded Mode