HackTool:Win32/AutoKMS always return

If the same threat keeps returning after quarantine or an offline scan, the most likely causes in the available guidance are:

• the file was only partially removed
• another hidden malware component is reinstalling it after restart
• the item is still only quarantined, not fully removed

Recommended steps:

1. Run the Malicious Software Removal Tool first:
   • Press Windows key + R
   • Type %windir%\system32\mrt.exe
   • Select OK
   • If prompted, select Yes
   • Follow the prompts to scan and clean the PC
2. Restart the PC.
3. Install the latest Windows updates.
4. Run Microsoft Defender Offline again:
   • Go to Start > Settings > Update & Security > Windows Security > Virus & threat protection
   • Under Current threats, select Scan options
   • Select Windows Defender Offline scan
   • Select Scan now
5. Check Protection history / Threat history:
   • Go to Start > Settings > Update & Security > Windows Security > Virus & threat protection
   • Open Threat history
   • If the item is listed as Threat quarantined, choose Remove to delete it from the device
   • Do not choose Allow unless the file is fully trusted, because that lets it run again
6. If Defender keeps showing scan or removal errors, run Windows Update and, if needed, install the latest protection updates manually.

Important:

• Quarantine blocks the file so it cannot run, but it is not the same as permanent removal.
• If the threat reappears right after restart, that matches Microsoft guidance for malware that is being silently reinstalled by another hidden component.
• Defender Offline restarts the PC before scanning, so save work first.

If the PC has already been changed or damaged by the malware and cleanup does not succeed, the documented recovery path is to reset, restore, or reinstall Windows, preferably restoring files from backups created before the infection.

• Troubleshoot problems with detecting and removing malware
• Antivirus and antimalware software: FAQ
• Protection History in the Windows Security App
• Troubleshoot problems with detecting and removing malware
• Troubleshoot problems with detecting and removing malware