How to remove KMS_Tools_Portable_by_Ratiborus.exe

KMS_Tools_Portable_by_Ratiborus.exe

The module KMS_Tools_Portable_by_Ratiborus.exe has been detected as Hack.KMS

KMS_Tools_Portable_by_Ratiborus.exe
Remove KMS_Tools_Portable_b

File Details

Product Name:

KMS Tools Portable
Company Name:

Ratiborus
MD5: a7f226716706b40164d495179b2c33ac
Size: 17 MB
First Published: 2018-04-04 20:05:21 (6 years ago)
Latest Published: 2025-01-03 23:02:11 (3 days ago)
Status: Hack.KMS (on last analysis)
Analysis Date: 2025-01-03 23:02:11 (3 days ago)

Overview

Signed By: WZT
Status: Valid

Common Places:

%sysdrive%\torrents
%profile%
%sysdrive%\jdownloader
%sysdrive%\soft\microsoft office 2016 pro_visio_project 16.0.4498.1000 repack by kpojiuk.v.2017.04
%sysdrive%\-=ports=-
%desktop%\windows and office cracks and activators
%profile%
%profile%
%sysdrive%\system volume information\_restore{6f165323-7514-4982-aa7d-813c132d5ccd}
%sysdrive%\system volume information\_restore{6f165323-7514-4982-aa7d-813c132d5ccd}

File Names:

KMSTools.exe
KMS_Tools_Portable_by_Ratiborus.exe
KMSTools2.exe

Geography:

36.4%
18.2%
18.2%
9.1%
9.1%
9.1%

OS Version:

Windows 10 54.5%
Windows 7 36.4%
Windows XP 9.1%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00001000

PE Sections:

Name Size of data MD5
.code 58880 2f4ffdebf501d88d3ea8b1bc27b62fe0
.text 458240 2a2864932aff4c31f38b3d0b34536c23
.rdata 105472 e63f3766c3abc20d5242d9008fda1952
.data 17135616 6da9c428f506e16fadbbccf8abd9ba31
.rsrc 107520 cd8eecb313ac67245d4cfc55548db0bb

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for KMS_Tools_Portable_by_Ratiborus.exe
copyright for information about KMS_Tools_Portable_by_Ratiborus.exe