How to remove KMSTools.exe

KMSTools.exe

The module KMSTools.exe has been detected as Hack.KMS

KMSTools.exe
Product Name:

KMS Tools Portable

Company Name:

Ratiborus

MD5: a25dc796ccdd9fa681a7fef4be9d54e8
Size: 17 MB
First Published: 2017-09-15 08:08:38 (7 years ago)
Latest Published: 2020-10-06 07:44:19 (4 years ago)
Status: Hack.KMS (on last analysis)
Analysis Date: 2020-10-06 07:44:19 (4 years ago)
Signed By: WZT
Status: Valid
%sysdrive%\ruosiameswin10instalui\aktyyvacija_ratiborus\kms tools portable 18_06_2016
%desktop%
%sysdrive%\all.activation.windows.v7.0-p2p\all activation\kms
%sysdrive%\install
%sysdrive%
%sysdrive%\backup\programs (h)\onedrive\app\all activation windows 7-8-10 v7.0 + office acivation [sdeempc]\all activation\kms
%sysdrive%\soft\активаторы\kms tools portable.zip
%sysdrive%\soft\активация\all activation windows v7.0 dc 30.06.2016\all activation\kms
%profile%\downloads
%sysdrive%\windows 10\all activation windows 7-8-10 v7.0 + office acivation [sdeempc]\all activation\kms
20.0%
15.0%
10.0%
7.5%
7.5%
7.5%
7.5%
5.0%
5.0%
5.0%
2.5%
2.5%
2.5%
2.5%
Windows 10 75.0%
Windows 7 15.0%
Windows Server 2008 R2 5.0%
Windows Server 2016 5.0%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00001000

PE Sections:

Name Size of data MD5
.code 62464 074d17aa952261e30731f85b7c5d94f5
.text 458752 7657b54e9df7a343352922eb71d1641b
.rdata 105472 792122913262534b2d3f11de64786e85
.data 17309696 8bd4a840ff1b41521e0623e4ad3fefed
.rsrc 107520 395ad1badd8e076f59ca58766695a67b

More information:

Download GridinSoft Anti-Malware - Removal tool for KMSTools.exe