How to remove Re-LoaderByR@1n.exe

Re-LoaderByR@1n.exe

The module Re-LoaderByR@1n.exe has been detected as Hack.KMS

Re-LoaderByR@1n.exe
Remove Re-LoaderByR@1n.exe

File Details

Product Name:

Re-Loader By R@1n
MD5: a972f32dc4211aab9a3902dcfaa5a8df
Size: 2 MB
First Published: 2018-02-18 18:13:48 (6 years ago)
Latest Published: 2018-10-02 21:04:56 (5 years ago)
Status: Hack.KMS (on last analysis)
Analysis Date: 2018-10-02 21:04:56 (5 years ago)

Common Places:

%sysdrive%\hd externo\arquivos para instalação\ativador\ativador novo.rar
%sysdrive%\hd externo\arquivos para instalação\ativador windows e office\ativador novo
%sysdrive%\dropbox\dropbox\windows 8\ativador novo
%sysdrive%\hd externo\arquivos para instalação\pacote ativador xp-7-8-8.1\ativador novo
%profile%\dropbox\windows 8
%sysdrive%\moje dokumenty\aktywatory\paczka aktywatorów window i office [marzec2015]\mtcpmar2015.rar\mtcpmar2015\microsoft.toolkit.collection.pack.march2015
%sysdrive%\flashdisk yoyo\penting\usb flashdisk\mtkp_2015.rar\microsoft.toolkit.collection.pack.march2015
%sysdrive%\новая паeeeeeпка (2)
%sysdrive%\hdd\activator\sbornik\microsoft.toolkit.collection.pack.04.2015.rar
%sysdrive%\meus arquivos\downloads\ativadores

File Names:

2-Ativador.exe
Re-LoaderByR@1n.exe

Geography:

54.5%
18.2%
9.1%
9.1%
9.1%

OS Version:

Windows 10 90.9%
Windows 7 9.1%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00002e5e

.NET Info:

MVID: 6b932d2d-0435-432e-85ef-10c5f838e8f1

PE Sections:

Name Size of data MD5
.text 4096 65f28e09e4fbe3c0dd7466e313af9322
.rsrc 104448 14dd8a5711c187fdc8d8c7d43e734c66
.reloc 512 56548ea2214afd4f6a3003e6f27fc290

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for Re-LoaderByR@1n.exe
copyright for information about Re-LoaderByR@1n.exe