tojan horse hacktool help me out

[Hollingerw2019]

help me out to deal with this tojan horse on 64 bit windows 10 on dell latitude 3330 

C:\Windows\SECOH-QAD.dll

 C:\Windows\Temp\SECOH-QAD.dll

C:\Windows\Temp\SECOH-QAD.exe

please reply 

[TheBean]

do you have an antivirus?

[Hollingerw2019]

yeah using defender and malware-byte that's it  

[TheBean]

get malwarebytes, go into safe mode, delete those files. 

[Hollingerw2019]

i have malwarebytes

[Hollingerw2019]

ok but it is on windows 10

[TheBean]

wait a sec.... kmspico....

o...m....g....

you are literally asking why you got viruses after trying to activate windows illegally. 

[Hollingerw2019]

No it has windows 10 my father bought it for my little sister off of eBay 

 

[TheBean]

Just now, Hollingerw2019 said:

No it has windows 10 my father bought it for my little sister off of eBay 

 

did he buy the pc off ebay? or bought the licence only online?

btw buying it off ebay is NOT EVER RECOMMENDED. they are 97% of the time fake and will automatically end the license after a few weeks. 

[Hollingerw2019]

[m9x3mos]

3 minutes ago, Saksham said:

did he buy the pc off ebay? or bought the licence only online?

btw buying it off ebay is NOT EVER RECOMMENDED. they are 97% of the time fake and will automatically end the license after a few weeks. 

To me that sounds like the computer was bought off eBay. And that is probably how they activated Windows on the computer. More than likely after about 180 days there will be messages about activating Windows I'd bet.

[m9x3mos]

2 minutes ago, Hollingerw2019 said:

Check the activation section in system where the windows update option is.

[Hollingerw2019]

Just now, m9x3mos said:

Check the activation section in system where the windows update option is.

Ok can help me out

 

[m9x3mos]

Post a picture of that screen. It will indicate how is was activated.

@Hollingerw2019

[Hollingerw2019]

2 minutes ago, m9x3mos said:

Post a picture of that screen. It will indicate how is was activated.

@Hollingerw2019

I am in safe mode 

[m9x3mos]

4 minutes ago, Hollingerw2019 said:

Ok can help me out

 

Under settings, update and security, then activation. What does it show there?

[m9x3mos]

1 minute ago, Hollingerw2019 said:

I am in safe mode 

You should be able to still see that.

[MrFixitBlankFace]

Ebay was a mistake....

[m9x3mos]

Just now, MrFixitBlankFace said:

Ebay was a mistake....

As it often is when buying used computers.

[Hollingerw2019]

1 minute ago, MrFixitBlankFace said:

Ebay was a mistake....

3 minutes ago, m9x3mos said:

Under settings, update and security, then activation. What does it show there?

 

[Hollingerw2019]

Sorry for reposting it 

[TheBean]

this is where the virus came from.....

[MrFixitBlankFace]

1 minute ago, Hollingerw2019 said:

 

This probably means you have no control over this activation of windows.  You do not have access to the product key and therefore you can't reactivate it.    

[TheBean]

those virus files originate from this program ^^^^^

[m9x3mos]

2 minutes ago, Hollingerw2019 said:

 

Yeah. They cheated when installing Windows on that computer and it is not a valid license. Kmspico was used to activate the machine. If that is removed, the license will no longer be good after 180 days.

That computer shipped with Windows 7. I would suggest backing up anything you need, installing and activating the version of Windows 7 that shipped with it then upgrade to Windows 10. It should activate then.