How to remove AutoKMS.exe

AutoKMS.exe

The module AutoKMS.exe has been detected as Virtool.AutoKMS

AutoKMS.exe
Remove AutoKMS.exe

File Details

MD5: 83ac88e59aed154d19915169adf0faad
Size: 3 MB
First Published: 2017-05-21 06:06:43 (7 years ago)
Latest Published: 2022-06-12 23:02:58 (2 years ago)
Status: Virtool.AutoKMS (on last analysis)
Analysis Date: 2022-06-12 23:02:58 (2 years ago)

Common Places:

%windir%\autokms
%appdata%\zhp\quarantine
%sysdrive%\windows.0\autokms
%windir%
%windir%
%windir%
%windir%
%windir%
%windir%
%windir%

Geography:

9.9%
8.9%
8.5%
6.3%
3.5%
3.1%
3.1%
3.1%
2.8%
2.6%
2.6%
2.3%
2.3%
2.1%
1.9%
1.9%
1.9%
1.4%
1.4%
1.4%
1.4%
1.4%
1.4%
1.2%
1.2%
1.2%
1.2%
1.2%
1.2%
0.9%
0.9%
0.9%
0.9%
0.7%
0.7%
0.7%
0.7%
0.7%
0.7%
0.7%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%

OS Version:

Windows 7 43.2%
Windows 10 38.7%
Windows 8.1 11.6%
Windows 8 2.8%
Windows Server 2012 R2 1.9%
Windows Server 2008 R2 0.9%
Windows XP 0.2%
Windows Vista 0.2%
Windows Embedded 8.1 0.2%
Windows Server 2012 0.2%

Analysis

Subsystem: Windows CUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0033444e

.NET Info:

MVID: fa9d7590-a71c-41e7-844b-4280081aaa08
Typelib ID: 3e577747-1842-4364-af1e-ed2a30c03f61

PE Sections:

Name Size of data MD5
.text 3352064 f12391c89c00055ff94f77d7c8cfc912
.rsrc 374272 88270f70c612527fae2b125f6707dda0
.reloc 512 cf918710a7daadf39a2f230560e928ba

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for AutoKMS.exe
copyright for information about AutoKMS.exe