How to remove KMSTools.exe

KMSTools.exe

The module KMSTools.exe has been detected as Hack.KMS

KMSTools.exe
Product Name:

KMS Tools Portable

Company Name:

Ratiborus

MD5: f8452388d647f5af7c8e8feb0ed6a4e4
Size: 18 MB
First Published: 2017-09-08 10:10:52 (7 years ago)
Latest Published: 2020-05-27 00:41:55 (4 years ago)
Status: Hack.KMS (on last analysis)
Analysis Date: 2020-05-27 00:41:55 (4 years ago)
Signed By: WZT
Status: Valid
%sysdrive%\программы
%sysdrive%\soft\личное\!!!\windows 10 загрузка виндовс(x86-x64bit)
%mydoc%\windows.10.7.office.2016.activator.ratiborus.kms.tools.pefel.net
%sysdrive%\win 10 인증자료\kms tools
%sysdrive%\работа\а 2\проги-работа\леново\microsoft office 2016 standard 16.0.4405.1000 repack by kpojiuk
%desktop%\backup
%desktop%
%sysdrive%\downloads\유틸
%sysdrive%\комп
%sysdrive%\jdownloader folder\_software
21.1%
15.8%
15.8%
15.8%
5.3%
5.3%
5.3%
5.3%
5.3%
5.3%
Windows 10 73.7%
Windows 7 26.3%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00001000

PE Sections:

Name Size of data MD5
.code 62976 3f624e5e4362a2a0cff09ee2b00a57b7
.text 458752 ae0de236d10cac5794612eb1858df270
.rdata 105472 d1cb8e38140b57c1edaa71e4ea249f03
.data 18775040 f9ba74ae564aef6acadf8863f802010c
.rsrc 107520 4730f68aa9e6b1e48412cff246f94edc

More information:

Download GridinSoft Anti-Malware - Removal tool for KMSTools.exe