How to remove $RNV86QZ.exe

$RNV86QZ.exe

The module $RNV86QZ.exe has been detected as Hack.AutoKMS

$RNV86QZ.exe
Remove $RNV86QZ.exe

File Details

Product Name:

KMS Server Emulator Service (XP)
Company Name:

MDL Forum, mod by Ratiborus
MD5: 882be785eb2431b769b46477628df81d
Size: 270 KB
First Published: 2017-06-13 01:01:56 (7 years ago)
Latest Published: 2020-11-24 11:53:42 (4 years ago)
Status: Hack.AutoKMS (on last analysis)
Analysis Date: 2020-11-24 11:53:42 (4 years ago)

Common Places:

%desktop%\активатор\kmsauto net 1.0.8 portable\kmsauto net v1.0.8 portable ru\bin
%desktop%\kmsauto\bin
%temp%\rar$exa0.248\active windows, office\kmsauto net v1.0.8 portable en\bin
%desktop%\activator\kmsauto net v1.0.8 portable ru\bin
%desktop%\активаторы\kmsauto net v1.0.8 portable ru\bin
%windir%\setup\scripts\data\bin
%desktop%\ярлыки\активаторы\kmsauto net v1.0.8 portable ru\bin
%desktop%\key\kmsauto net 1.0.8 portable\kmsauto net v1.0.8 portable ru\bin
%desktop%\help\kmsauto net v1.0.8 portable ru\bin
%mydoc%\активатор\kmsauto net 1.0.8 portable\kmsauto net v1.0.8 portable ru\bin

File Names:

KMSSS.exe
$RNV86QZ.exe

Geography:

54.0%
19.7%
3.3%
3.3%
3.3%
2.8%
2.3%
2.3%
2.3%
1.9%
1.4%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%

OS Version:

Windows 8.1 40.2%
Windows 7 37.9%
Windows 10 22.0%

Analysis

Subsystem: Windows CUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00014816

PE Sections:

Name Size of data MD5
.text 184320 1f7a652fd5f7cff0a99c57ce68ecc3fa
.rdata 68608 c9d18d33dfee03e26438b037f5732239
.data 7680 f2066138eccdd37a094f3353bb7bdac6
.rsrc 1536 69ac485393c05e5275123784d2cf8a32
.reloc 13312 0f54d76c2dab9ac4c9fdd5f792e586fb

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for $RNV86QZ.exe
copyright for information about $RNV86QZ.exe