How to remove Service_21.exe

Service_21.exe Removal: How to Get Rid of Service_21.exe0fffff9ed9392a7a925b4ea70c43c874

Service_21.exe

The module Service_21.exe has been detected as Hack.KMS

Service_21.exe
Product Name:

Service_KMS

Company Name:

@ByELDI

MD5: 0fffff9ed9392a7a925b4ea70c43c874
Size: 722 KB
First Published: 2017-05-21 17:06:06 (2 years ago)
Latest Published: 2018-12-28 15:13:45 (2 months ago)
Status: Hack.KMS (on last analysis)
Analysis Date: 2018-12-28 15:13:45 (2 months ago)
Signed By: @ByELDI
Status: Valid
%programfiles%\kmspico
%programfiles%\microsoft office\office16\kmspico
%windir%\temp\kms
%programfiles%\microsoft office\kmspico
%sysdrive%\system volume information\systemrestore\frstaging\program files\kmspico
%programfiles%\powerdatarecovery\d documento\program files\kmspico
%programfiles%
%sysdrive%\webrootdebug\quarantine\folders
%appdata%\zhp
%sysdrive%\office\office2013vol版激活工具\kmspico_install_v4_5
Service_KMS.exe
Service_21.exe
service_kms.exe
SERVICE_KMS.del
17.8%
10.4%
8.8%
6.6%
6.4%
5.0%
4.7%
3.2%
3.2%
2.9%
2.9%
2.6%
2.3%
2.2%
1.6%
1.5%
1.0%
1.0%
1.0%
1.0%
0.9%
0.9%
0.9%
0.9%
0.7%
0.6%
0.6%
0.6%
0.6%
0.6%
0.4%
0.4%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
Windows 10 59.6%
Windows 7 30.5%
Windows 8.1 7.5%
Windows 8 1.5%
Windows XP 0.6%
Windows Vista 0.1%
Windows Server 2008 R2 0.1%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000b43be

.NET Info:

MVID: 706ec5b4-e5e7-4ae2-95ff-8cfe27db2dd6

PE Sections:

Name Size of data MD5
.text 730112 1a80e001f86c6ac11f49729af9efd1b3
.rsrc 4096 8a8a8a4675fde5e674879c9ed65a52e5
.reloc 512 7d1b663e67cabdcff4403b80f1effe02

More information:

Download GridinSoft Anti-Malware - Removal tool for Service_21.exe