How to remove HEU_KMS_Renewal.exe

HEU_KMS_Renewal.exe

The module HEU_KMS_Renewal.exe has been detected as PUP.HackKMS

HEU_KMS_Renewal.exe
Remove HEU_KMS_Renewal.exe

File Details

Company Name:

HEU CNST
MD5: dacdca9df5166d6399a04f0d0647c356
Size: 1 MB
First Published: 2017-06-11 02:07:25 (6 years ago)
Latest Published: 2017-06-11 02:07:25 (6 years ago)
Status: PUP.HackKMS (on last analysis)
Analysis Date: 2017-06-11 02:07:25 (6 years ago)

Common Places:

%windir%\kmsonboot

Geography:

100.0%

OS Version:

Windows 7 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00026bf7

PE Sections:

Name Size of data MD5
.text 573440 74af66fa540568c59b3868e78900e476
.rdata 182272 576c856afaad699ad9fe099fc6a9ce33
.data 25088 e6d2e204147f7cdc3055011093632f54
.rsrc 438272 745a7a7f71b11e22d43bdcb31c9e2610
.reloc 42496 c2f6ddaeef894b7510c3be928eeae5dd

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for HEU_KMS_Renewal.exe
copyright for information about HEU_KMS_Renewal.exe