Avast WEBforum

Other => Viruses and worms => Topic started by: shibata3 on February 05, 2011, 12:20:42 AM

Title: avast 5 is blocking AutoKMS.exe on boot!
Post by: shibata3 on February 05, 2011, 12:20:42 AM
Hi!

Just to inform you that the last definition of Avast! 5 (110204-2) is blocking the file below when you boot.
Added the file in the list of exceptions. I hope the team avast fix the bug soon. False positive of course...

Quote
http://www.virustotal.com/file-scan/report.html?id=2330327f5177058d660d8d608cc950dc24a03983597a07d9e5ada1cdd70b8e88-1296839762

File name: C:\Windows\AutoKMS.exe
Submission date: 2011-02-04 17:16:02 (UTC)
Current status: finished
Result: 29 /43 (67.4%)

Additional information
MD5 : e529a1ba814ab5afa5068db7e487b4ba
SHA1 : 6faf21e89147e54d02eb3daae1c7149de7361d94
SHA256: 2330327f5177058d660d8d608cc950dc24a03983597a07d9e5ada1cdd70b8e88

Windows 7 ultimate 64bit / Avast! Free v5.1.889
Title: Re: avast 5 is blocking AutoKMS.exe on boot!
Post by: Silk0 on February 05, 2011, 12:25:36 AM
Result:
29 /43 (67.4%)

Uhhh.. I'm not so sure about the FP situation.
Title: Re: avast 5 is blocking AutoKMS.exe on boot!
Post by: shibata3 on February 05, 2011, 12:33:12 AM
Result:
29 /43 (67.4%)

Uhhh.. I'm not so sure about the FP situation.

I know the program and I'm sure it's FP!  8)
Title: Re: avast 5 is blocking AutoKMS.exe on boot!
Post by: spg SCOTT on February 05, 2011, 12:39:09 AM
It is a crack for office (from searching)...
"from the horses mouth" http://www.broadbandreports.com/forum/r25352751-

Keep the detection...my opinion anyway...
Title: Re: avast 5 is blocking AutoKMS.exe on boot!
Post by: DavidR on February 05, 2011, 01:11:39 AM
There are many such hits on google for this being a crack/keygen and aside from any legal/moral issue they frequently come with uninvited guests.

Given the virustotal detections 29/43 I would also say this is a good detection.
Title: Re: avast 5 is blocking AutoKMS.exe on boot!
Post by: shibata3 on February 06, 2011, 11:18:02 PM
Avast!5 now detecting AutoKMS and KMSEmulator. I have added them to the Exclusions list and that doesn't seem to matter.
I always shutdown my computer at night. What is the best way to work around this issue? Thanks.


Quote
Code: [Select]
http://www.virustotal.com/file-scan/report.html?id=a2ffd0bc5e055e519fd3006bfdae422327d8e01310eae528267014c54293bfa4-1296885641

File name: File name: C:\Windows\KMSEmulator.exe
Submission date: 2011-02-05 06:00:41 (UTC)
Current status: finished
Result: 27 /43 (62.8%)

Additional information
Show all
MD5   : cf7498ada4ac2f50e5ca72205865d7ce
SHA1  : b97d98cd50ea1c8d1d471043bc21bd95ff73b6d3
SHA256: a2ffd0bc5e055e519fd3006bfdae422327d8e01310eae528267014c54293bfa4

Windows 7 ultimate 64bit / Avast! Free v5.1.889
Title: Re: avast 5 is blocking AutoKMS.exe on boot!
Post by: spg SCOTT on February 06, 2011, 11:20:23 PM
Buy office?
Title: Re: avast 5 is blocking AutoKMS.exe on boot!
Post by: Silk0 on February 07, 2011, 01:12:31 AM
Buy office?

There's no need.

Just download OpenOffice.org (http://www.openoffice.org/ (http://www.openoffice.org/)). Is free, is an excellent alternative to MS Office and great for people who have a tight budget and doesn't want to spend $$ or ££ to get the job done.