How to remove $RO1K1MB.exe

$RO1K1MB.exe

The module $RO1K1MB.exe has been detected as General Threat

$RO1K1MB.exe
Remove $RO1K1MB.exe

File Details

Product Name:

KMSAuto Lite
Company Name:

Ratiborus, MSFree Inc.
MD5: 6d7745073aeafda9470739f21da2f84c
Size: 5 MB
First Published: 2018-04-23 05:02:26 (6 years ago)
Latest Published: 2020-01-30 13:03:03 (4 years ago)
Status: General Threat (on last analysis)
Analysis Date: 2020-01-30 13:03:03 (4 years ago)

Common Places:

%sysdrive%\$recycle.bin\s-1-5-21-3053362856-1199953004-3944942590-1001
%sysdrive%\activator windows10 password (afghanistan)
%sysdrive%\all soft\office 2010 x64 professional +crack
%sysdrive%\all soft
%sysdrive%\$recycle.bin
%temp%
%temp%

File Names:

KMSAuto.exe
$RO1K1MB.exe

Geography:

71.4%
28.6%

OS Version:

Windows 10 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00001000

PE Sections:

Name Size of data MD5
.code 103936 d04212d6666179e01b11200c055e99e2
.text 307200 a00f9ba978be0ea529dec0af5a13cb9a
.rdata 35840 72679c95f19163a0118d222b12234a57
.data 5672960 6b9866e144c53f4c49ccf744fdc10753
.rsrc 45568 e18967bbcd97b18b46683d78111201a1

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for $RO1K1MB.exe
copyright for information about $RO1K1MB.exe