How to remove KMSSS.exe

KMSSS.exe

The module KMSSS.exe has been detected as Hack.KMS

KMSSS.exe
Remove KMSSS.exe

File Details

Product Name:

KMS Server Emulator Service (XP)
Company Name:

MDL Forum, mod by Ratiborus
MD5: d5c58d8bc0cced9b643b4fc38390aa96
Size: 269 KB
First Published: 2018-04-30 19:11:02 (6 years ago)
Latest Published: 2019-07-28 07:41:51 (5 years ago)
Status: Hack.KMS (on last analysis)
Analysis Date: 2019-07-28 07:41:51 (5 years ago)

Common Places:

%sysdrive%\новая папка\kmsauto_net_v1.0.7_portable_ru.7z\kmsauto net v1.0.7 portable ru
%profile%\downloads\microsoft office 2010 with sp2 vl [select] russian\kms\kms\kmsauto net v1.0.7 portable\kmsauto net v1.0.7 portable en
%profile%\downloads\microsoft office 2010 with sp2 vl [select] russian\kms.rar\kms\kmsauto net v1.0.7 portable\kmsauto net v1.0.7 portable en
%profile%\downloads\microsoft office 2010 with sp2 vl [select] russian\kms.rar\kms\kmsauto net v1.0.7 portable\kmsauto net v1.0.7 portable ru
%profile%\downloads\microsoft office 2010 with sp2 vl [select] russian\kms\kms\kmsauto net v1.0.7 portable\kmsauto net v1.0.7 portable ru
%sysdrive%\1.программы\офисные\microsoft office 2010\microsoft office 2010 with sp2 vl russian\kmsauto net v1.0.7 portable\kmsauto net v1.0.7 portable en
%sysdrive%\1.программы\офисные\microsoft office 2010\microsoft office 2010 with sp2 vl russian\kmsauto net v1.0.7 portable\kmsauto net v1.0.7 portable ru
%sysdrive%\все windows 8\активаторы\!!! акьтиатор kmsauto net 1.0.7 portable\kmsauto дркугие\kmsauto net 1.0.7 portable\kmsauto net v1.0.7 portable ru
%sysdrive%\все windows 8\активаторы\!!! акьтиатор kmsauto net 1.0.7 portable\!!! kmsauto net v1.0.7 portable ru
%sysdrive%\found.001\disco d\flash zapato\activacion\activador office\kmsauto_net_v1.0.7_portable_es

Geography:

70.0%
20.0%
10.0%

OS Version:

Windows 10 60.0%
Windows 7 20.0%
Windows 8.1 20.0%

Analysis

Subsystem: Windows CUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000144e6

PE Sections:

Name Size of data MD5
.text 183808 c52e50bf4abba269c312f67c8e59dc54
.rdata 68096 f5c460098a6ede97185c3a03eeb67e51
.data 7680 ef9dd4dcc67f10ebf89fd98b9d963b25
.rsrc 1536 4a9c8369e793330261a8d2abe18d9e16
.reloc 13312 50bde51136b5b0f85b2f4fc3284c6b04

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for KMSSS.exe
copyright for information about KMSSS.exe