How to remove Re-LoaderByR@1n.exe

Re-LoaderByR@1n.exe

The module Re-LoaderByR@1n.exe has been detected as Hack.KMS

Re-LoaderByR@1n.exe
Remove Re-LoaderByR@1n.exe

File Details

Product Name:

Re-Loader By R@1n
MD5: 3d3b8fb74fc4f626072c244493df19e5
Size: 1 MB
First Published: 2017-07-25 16:31:08 (6 years ago)
Latest Published: 2020-01-16 14:40:01 (4 years ago)
Status: Hack.KMS (on last analysis)
Analysis Date: 2020-01-16 14:40:01 (4 years ago)

Common Places:

%profile%\downloads\re-loader
%temp%\rar$exa0.577\5.re-loader_byr@1n_v14rc1
%temp%\rar$exa0.506\5.re-loader_byr@1n_v14rc1
%sysdrive%\ัะพั„ั‚\windows\windows 10 with msdn (russian)
%sysdrive%\downloads\informatica\windows.10 all-in-one x64 x86\attivatori\attivatori.backup.rar
%sysdrive%
%desktop%\poco
%sysdrive%\becup\cartella 1264\windows.10.pro.ottobre.2015.64bit.ita-icv\attivatori\attivatori.backup.rar
%sysdrive%\emule downloads\windows.10.pro.ottobre.2015.64bit.ita-icv\windows.10.pro.ottobre.2015.64bit.ita-icv\attivatori\attivatori.backup.rar
%profile%\downloads

File Names:

Re-LoaderByR@1n.exe
A0121132.exe

Geography:

41.2%
11.8%
11.8%
11.8%
5.9%
5.9%
5.9%
5.9%

OS Version:

Windows 10 70.6%
Windows 7 23.5%
Windows XP 5.9%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00002e5e

.NET Info:

MVID: 6b932d2d-0435-432e-85ef-10c5f838e8f1

PE Sections:

Name Size of data MD5
.text 4096 492f6ad17795def1120ed1d6f3340b92
.rsrc 36864 5a19fffb2a77e9b4119b17f8b4e976f2
.reloc 512 0bf1ac8ee5b27631f1e7c41e552959a9

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for Re-LoaderByR@1n.exe
copyright for information about Re-LoaderByR@1n.exe