How to remove Re-LoaderByR@1n.exe

Re-LoaderByR@1n.exe

The module Re-LoaderByR@1n.exe has been detected as Hack.KMS

Re-LoaderByR@1n.exe
Remove Re-LoaderByR@1n.exe

File Details

Product Name:

Re-Loader By R@1n
MD5: 05fb374a9249906aa7ebf4b219c565f9
Size: 1 MB
First Published: 2017-08-10 05:01:44 (8 years ago)
Latest Published: 2021-05-17 20:27:04 (4 years ago)
Status: Hack.KMS (on last analysis)
Analysis Date: 2021-05-17 20:27:04 (4 years ago)

Common Places:

%temp%\rarsfx7
%temp%\rarsfx5
%profile%\downloads\re-loader_byr@1n_v1.4beta2_\re-loader_byr@1n_v1.4beta2_
%profile%\downloads\daz loader windows 10 www.nvsoftwares.com\daz loader windows 10 www.nvsoftwares.com\daz loader windows 10 www.nvsoftwares.com\daz loader windows 10 www.nvsoftwares.com\reloader
%profile%
%mydoc%\doc & music\doc perso\windows 10 home 32bits\activateur win 10.rar
%profile%\8. rl 1.4 beta 2.rar
%profile%\8. rl 1.4 beta 2.rar\rl 1.4 beta 2
%sysdrive%\documentos\acessorios
%sysdrive%\2-1\soft\2015-0617

File Names:

rainloader.exe
Re-LoaderByR@1n.exe

Geography:

20.5%
17.9%
7.7%
7.7%
5.1%
5.1%
5.1%
5.1%
5.1%
2.6%
2.6%
2.6%
2.6%
2.6%
2.6%
2.6%
2.6%

OS Version:

Windows 10 72.5%
Windows 7 20.0%
Windows 8.1 5.0%
Windows Server 2016 2.5%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00002e5e

.NET Info:

MVID: 6b932d2d-0435-432e-85ef-10c5f838e8f1

PE Sections:

Name Size of data MD5
.text 4096 96ab306682d00b01d5c97bc8fdaa00f0
.rsrc 36864 f48f56d67f44276d5a6a082c68036541
.reloc 512 452cc8a2ebe185071294da147955c240

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for Re-LoaderByR@1n.exe
copyright for information about Re-LoaderByR@1n.exe