How to remove KMService.exe

KMService.exe

The module KMService.exe has been detected as Trojan.HackKMS

KMService.exe
Remove KMService.exe

File Details

MD5: 9e97011c50db3f6bc6a4b21be5197a1e
Size: 160 KB
First Published: 2017-05-21 07:08:57 (8 years ago)
Latest Published: 2025-02-22 23:01:35 (9 months ago)
Status: Trojan.HackKMS (on last analysis)
Analysis Date: 2025-02-22 23:01:35 (9 months ago)

Common Places:

%sysdrive%\windows
%localappdata%\temp
%temp%\7zipsfx.001
%windir%\kj
%commonappdata%\asrockusbpatcher\patcherwintemp\sources\$oem$\$$\setup\scripts\data\server
%temp%\7zipsfx.000
%windir%\temp
%temp%\7zipsfx.000\data\server
%temp%\7zipsfx.002
%sysdrive%\windows.old\windows\kj

File Names:

KMService.exe.dav
KMService.exe
$RXXBBD6.exe
kmservice.exe

Geography:

31.3%
8.1%
6.2%
6.0%
6.0%
3.3%
3.1%
2.4%
2.2%
2.2%
1.8%
1.5%
1.5%
1.5%
1.3%
1.3%
1.1%
1.1%
0.9%
0.9%
0.9%
0.9%
0.7%
0.7%
0.7%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%

OS Version:

Windows 7 52.9%
Windows 10 29.3%
Windows 8 8.5%
Windows 8.1 6.2%
Windows XP 1.4%
Windows Vista 0.7%
Windows Server 2012 R2 0.7%
Windows Server 2008 R2 0.2%

Analysis

Subsystem: Windows CUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0000eab0

PE Sections:

Name Size of data MD5
.text 98304 abcdf075c9580e476cf7dcd767cd3de2
.rdata 8192 4aae483a1ada75aa433625fa29d0a104
.data 40960 26cbfe1b95a5926ff521fccda9353484
.rsrc 12288 11a5c5da5f2196fdccaf437887bb83e6

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for KMService.exe
copyright for information about KMService.exe