How to remove MSActBackup (2017_08_10 13_53_02 UTC).exe

MSActBackup (2017_08_10 13_53_02 UTC).exe

The module MSActBackup (2017_08_10 13_53_02 UTC).exe has been detected as Hack.AutoKMS

MSActBackup (2017_08_10 13_53_02 UTC).exe
Product Name:

MSActBackUp

MD5: ec60eda0aa11749aa38526884322acf3
Size: 1 MB
First Published: 2017-09-07 20:03:20 (7 years ago)
Latest Published: 2025-03-01 23:01:56 (5 months ago)
Status: Hack.AutoKMS (on last analysis)
Analysis Date: 2025-03-01 23:01:56 (5 months ago)
Signed By: WZT
Status: Valid
%profile%\downloads\программы\all activation windows (7-8-10) v14.0 2017\all activation\kms\msactbackup 1.1.0
%profile%\downloads\microsoft.toolkit.collection.pack.july.2017.tut2u\july2017\july2017\msactbackup v1.1.0 (portable)
%desktop%\yazılım\microsoft aktivasyon paketi mayıs 2017\microsoft aktivasyon paketi - mayıs 2017\mayis2017aracpaketi\program\msactbackup v1.1.0 (portable)
%desktop%\ts_18_64\all activation\kms\msactbackup 1.1.0
%profile%\downloads\activadores all\all activation windows 7-8-10 v12.0 (windows @amp; office activator) [sadeempc]\all activation\kms\msactbackup 1.1.0
%profile%\downloads\activaton\all activation\kms\msactbackup 1.1.0
%desktop%\all activation windows (7-8-10) v13.5 2017\all activation\kms\msactbackup 1.1.0
%profile%\downloads\msactbackup portable v1.1.0\msactbackup portable v1.1.0
%desktop%\usb2017\programme\msactbackup 1.1.0
%profile%\downloads\[download.ipeenk.com] microsoft toolkit collection pack august 2017\msactbackup v1.1.0 (portable)
MSActBackup.exe
MSActBackup (2017_08_10 13_53_02 UTC).exe
gMSActBackup.exe
MSActBackup (deleted b'526927fe273809ebdeebe941badd6817').exe
United States 18.2%
Vietnam 15.6%
Russia 9.1%
Germany 8.1%
United Kingdom 5.8%
Ukraine 3.6%
Poland 2.3%
Canada 2.3%
Romania 2.3%
Netherlands 2.3%
France 1.9%
Turkey 1.9%
Australia 1.9%
Spain 1.6%
Brazil 1.6%
Saudi Arabia 1.6%
Belarus 1.3%
Belgium 1.3%
Greece 1.3%
Mexico 1.0%
Indonesia 1.0%
India 1.0%
Egypt 1.0%
South Korea 1.0%
Thailand 1.0%
Peru 0.6%
Finland 0.6%
Norway 0.6%
Argentina 0.6%
Iran 0.6%
Azerbaijan 0.6%
Namibia 0.6%
Cambodia 0.6%
Chile 0.3%
Czech Republic 0.3%
Austria 0.3%
Côte d'Ivoire 0.3%
Hungary 0.3%
China 0.3%
Bulgaria 0.3%
Latvia 0.3%
Croatia 0.3%
Moldova 0.3%
Martinique 0.3%
Philippines 0.3%
Tunisia 0.3%
Lithuania 0.3%
Haiti 0.3%
Windows 10 71.5%
Windows 7 23.0%
Windows 8.1 2.9%
Windows 8 1.6%
Windows XP 0.6%
Windows Embedded 8.1 0.3%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00001000

PE Sections:

Name Size of data MD5
.code 48128 21bb393bdd5d373ae41a011ad8f22113
.text 354304 3755d0a3f358694af64ee047079b375d
.rdata 37376 29d74d3144da11e2084b05e9ffa3cf2c
.data 619008 64c6c478aa77daa719accc57975b9cc3
.rsrc 69632 ed681d23ae3234a95b37d2800234cd9e

More information:

Download GridinSoft Anti-Malware - Removal tool for MSActBackup (2017_08_10 13_53_02 UTC).exe
­