Author Topic: Avast keeps detecting AutoKMS on boot, even after excluding it.  (Read 1855 times)

0 Members and 1 Guest are viewing this topic.

Offline imso3k

  • Newbie
  • *
  • Posts: 2
I have Avast Premium Security on my PC, and on boot it keeps detecting AutoKMS as a virus in C:\Windows\AutoKMS, even after adding this folder to the exclusion list.

Something else I noticed, Avast doesn't add the detected "virus" to the Virus Chest.

Anyone else faced this issue?

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89420
  • No support PMs thanks
Re: Avast keeps detecting AutoKMS on boot, even after excluding it.
« Reply #1 on: July 14, 2020, 08:32:58 PM »
That isn't strange considering HackTool.AutoKMS is/can be used to hack windows.

https://blog.malwarebytes.com/detections/hacktool-autokms/
Quote from: extract
HackTool.AutoKMS is Malwarebytes’ generic detection name for hacktools that are intended to enable the illegal use of Microsoft products like Windows and Office.

There are many other such hits on a search for AutoKMS:
https://support.microsoft.com/en-ie/help/4026234/automated-hacktoolwin32autokms
https://community.norton.com/en/forums/autokmsexe-dangerous
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.6.6121 (build 24.6.9241.848) UI 1.0.809/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline imso3k

  • Newbie
  • *
  • Posts: 2
Re: Avast keeps detecting AutoKMS on boot, even after excluding it.
« Reply #2 on: July 14, 2020, 08:35:36 PM »
That isn't strange considering HackTool.AutoKMS is/can be used to hack windows.

https://blog.malwarebytes.com/detections/hacktool-autokms/
Quote from: extract
HackTool.AutoKMS is Malwarebytes’ generic detection name for hacktools that are intended to enable the illegal use of Microsoft products like Windows and Office.

There are many other such hits on a search for AutoKMS:
https://support.microsoft.com/en-ie/help/4026234/automated-hacktoolwin32autokms
https://community.norton.com/en/forums/autokmsexe-dangerous

I obviously know what AutoKMS is and what it's capable of, my question is why it keeps to detect it if I added it to the exclusion list?

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89420
  • No support PMs thanks
Re: Avast keeps detecting AutoKMS on boot, even after excluding it.
« Reply #3 on: July 14, 2020, 10:30:41 PM »
You may be excluding the file, but that doesn't exclude its actions.

If you are using this tool to circumvent product licenses, you can't expect any assistance on the official Avast support forum.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.6.6121 (build 24.6.9241.848) UI 1.0.809/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security