How to remove KMSServerService.exe

KMSServerService.exe

The module KMSServerService.exe has been detected as Hack.AutoKMS

KMSServerService.exe
Product Name:

KMS Server Emulator Service

Company Name:

My Digital Life Forums

MD5: f46b38c64563a6190220d56d78e14426
Size: 254 KB
First Published: 2017-05-28 07:04:40 (7 years ago)
Latest Published: 2020-12-28 15:36:56 (4 years ago)
Status: Hack.AutoKMS (on last analysis)
Analysis Date: 2020-12-28 15:36:56 (4 years ago)
%temp%\ed5b.tmp
%temp%\944b.tmp
%temp%\b6e2.tmp
%temp%\b3dc.tmp
%profile%\downloads\softwares\microsoft\kmsauto easy 1.06.v6
%temp%\8b09.tmp
%temp%\973e.tmp
%temp%
%sysdrive%\drive\tamale office\it\rafik programs\setups\unlockers\win 8 activators
%sysdrive%\microsoft windows 7 home premium 64 bit [pl] [
12.0%
10.0%
8.0%
8.0%
8.0%
6.0%
6.0%
4.0%
4.0%
4.0%
4.0%
4.0%
4.0%
2.0%
2.0%
2.0%
2.0%
2.0%
2.0%
2.0%
2.0%
2.0%
Windows 8.1 43.1%
Windows 10 33.3%
Windows 7 23.5%
Subsystem: Windows CUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0000dbac

PE Sections:

Name Size of data MD5
.text 148480 1798033a0232567726e13712e3d74c32
.rdata 68096 6ccd9edcc91b58619e34e17f06b5f550
.data 7168 9881bb327597144bdecce86fdb62cd67
.rsrc 1536 2f4feba09bf429bf99c0abe07c57285c
.reloc 34304 74eb692fad1c3cdd7702cd13d9e0680e

More information:

Download GridinSoft Anti-Malware - Removal tool for KMSServerService.exe