How to remove KMSAuto.exe

KMSAuto.exe

The module KMSAuto.exe has been detected as Hack.KMS

KMSAuto.exe
Remove KMSAuto.exe

File Details

Product Name:

KMSAuto Net
Company Name:

MSfree Inc.
MD5: b356cfe75cb4485fd15cf13177416e6d
Size: 4 MB
First Published: 2017-06-21 04:00:42 (7 years ago)
Latest Published: 2018-10-10 11:08:33 (6 years ago)
Status: Hack.KMS (on last analysis)
Analysis Date: 2018-10-10 11:08:33 (6 years ago)

Common Places:

%temp%\7zo5998.tmp
%sysdrive%\programlar\bütün cracler\win8.1 ve all\kmsanet_2014_v1.3.2_p_mecnun_bey\kmsanet_2014_v1.3.2_p_mecnun_bey.rar\kmsanet_2014_v1.3.2_p_mecnun_bey
%sysdrive%\programlar\bütün cracler\win8 crarc\win8.1 ve all\kmsanet_2014_v1.3.2_p_mecnun_bey\kmsanet_2014_v1.3.2_p_mecnun_bey.rar\kmsanet_2014_v1.3.2_p_mecnun_bey
%sysdrive%\programlar\fatmanur gıda tarım\prg\bütün cracler\win8 crarc\win8.1 ve all\kmsanet_2014_v1.3.2_p_mecnun_bey\kmsanet_2014_v1.3.2_p_mecnun_bey.rar\kmsanet_2014_v1.3.2_p_mecnun_bey
%sysdrive%\programlar\fatmanur gıda tarım\prg\bütün cracler\win8.1 ve all\kmsanet_2014_v1.3.2_p_mecnun_bey\kmsanet_2014_v1.3.2_p_mecnun_bey
%sysdrive%\programlar\fatmanur gıda tarım\prg\bütün cracler\win8 crarc\win8.1 ve all\kmsanet_2014_v1.3.2_p_mecnun_bey\kmsanet_2014_v1.3.2_p_mecnun_bey
%sysdrive%\programlar\fatmanur gıda tarım\prg\bütün cracler\win8.1 ve all\kmsanet_2014_v1.3.2_p_mecnun_bey\kmsanet_2014_v1.3.2_p_mecnun_bey.rar\kmsanet_2014_v1.3.2_p_mecnun_bey
%sysdrive%\windows ofis ve lisanslama programlari\full programlar aktivasyon v1.rar\full programlar aktivasyon v1\aktivasyon
%commonappdata%
%sysdrive%\programlar\office\office windows aktivasyon\full programlar aktivasyon v1\aktivasyon

File Names:

KMSAuto Net.exe
KMSAuto.exe

Geography:

78.9%
10.5%
10.5%

OS Version:

Windows 10 47.4%
Windows 7 42.1%
Windows 8.1 10.5%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x004d344e

.NET Info:

MVID: a2b53bf6-ba5b-4c87-a12c-a84965e076a5
Typelib ID: fcad9796-cfc1-41fa-93da-378996c2a356

PE Sections:

Name Size of data MD5
.text 5051904 5e41b2a27f9cc52328cc3fd43ce6e1be
.rsrc 48640 b70fff3cd25a24fcf3281305c241257c
.reloc 512 4ca0676baabe4a917eea4ab3dc90e3a8

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for KMSAuto.exe
copyright for information about KMSAuto.exe