How to remove KMSAuto.exe

KMSAuto.exe

The module KMSAuto.exe has been detected as Hack.AutoKMS

KMSAuto.exe
Product Name:

KMSAuto Lite

Company Name:

Ratiborus, MSFree Inc.

MD5: 78533e898d4069726da3134d1712919b
Size: 5 MB
First Published: 2017-06-15 14:05:58 (6 years ago)
Latest Published: 2020-12-17 22:42:06 (3 years ago)
Status: Hack.AutoKMS (on last analysis)
Analysis Date: 2020-12-17 22:42:06 (3 years ago)
%temp%\rar$exb0.433\kmsauto.lite.portable.v1.1.8
%profile%\downloads\office_2013\kmsauto.lite.portable.v1.1.8
%sysdrive%\windows
%profile%\downloads\aktivator.office.2013\kmsauto.lite.portable.v1.1.8
%profile%\downloads\aktivator.office.2013
%sysdrive%\активатор office 2013
%windir%
%temp%\rar$exb0.746
%sysdrive%\office_2013\aktivator.office.2013
%desktop%
64.5%
22.6%
3.2%
3.2%
2.2%
1.1%
1.1%
1.1%
1.1%
Windows 10 44.7%
Windows 7 40.4%
Windows 8.1 13.8%
Windows XP 1.1%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00001000

PE Sections:

Name Size of data MD5
.code 94720 96f53a0669c3b4fb2236152e16e88880
.text 307200 c221cc582afcb26e3e95deb6509854ab
.rdata 35840 d0a08765e1ebd8716da1edebcfe7ec2d
.data 5057024 d32a82b22f297434caf9f84a7af3aa74
.rsrc 45568 4a15cc3eec73656b50f8eb903bea5828

More information:

Download GridinSoft Anti-Malware - Removal tool for KMSAuto.exe