How to remove Win_8.1_activator.exe

Win_8.1_activator.exe

The module Win_8.1_activator.exe has been detected as Hack.KMS

Win_8.1_activator.exe
Remove Win_8.1_activator.ex

File Details

Product Name:

KMSpico

Company Name:

MD5: 91a32ef63ea709ddaff12f95302847d0
Size: 2 MB
First Published: 2017-06-13 09:10:14 (6 years ago)
Latest Published: 2019-11-29 15:12:18 (4 years ago)
Status: Hack.KMS (on last analysis)
Analysis Date: 2019-11-29 15:12:18 (4 years ago)

Common Places:

%sysdrive%\برامج\تعريفات\w.8.1.act.mazika2day.com.rar\w.8.1.act.mazika2day.com
%sysdrive%\برامج\تعريفات\win_8.1_activator
%profile%\downloads\תיקיה חדשה
%sysdrive%\complet\microsoft windows\windows 8.1\آداة تفعيل ويندوز 8.1 بجميع انواعه شرح التفعيل بالصور microsoft toolkit 2.5\windows 8.1 activator.rar
%sysdrive%\$recycle.bin\s-1-5-21-2859857163-3606966443-1107616872-1000\$rcyznz1.1\آداة تفعيل ويندوز 8.1 بجميع انواعه شرح التفعيل بالصور microsoft toolkit 2.5\windows 8.1 activator.rar
%sysdrive%\complet\برامج\babylon7\windows 8.1 activator.rar
%temp%\temp1_kmspicov9.0.2.20131025(www.downloadha.com).zip\kmspicov9.0.2.20131025(www.downloadha.com)\kmspicov9.0.2.20131025
%profile%\downloads\kmspicov9.0.2.20131025(www.downloadha.com)\kmspicov9.0.2.20131025(www.downloadha.com)\kmspicov9.0.2.20131025
%profile%\downloads\_www.gigapurbalingga.com__windows_8.1_activator
%desktop%\save pennetta\util\win8.1

File Names:

KMSpico_setup.exe
Win_8.1_activator.exe
KMSpico_v9.0.2.20131025_setup.exe
[www.gigapurbalingga.com]_Win_8.1_activator.exe

Geography:

23.3%
23.3%
20.0%
10.0%
10.0%
3.3%
3.3%
3.3%
3.3%

OS Version:

Windows 10 43.3%
Windows 7 23.3%
Windows 8.1 20.0%
Windows 8 10.0%
Windows XP 3.3%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0000a5f8

PE Sections:

Name Size of data MD5
CODE 40448 c3bd95c4b1a8e5199981e0d9b45fd18c
DATA 1024 1ee71d84f1c77af85f1f5c278f880572
BSS 0 00000000000000000000000000000000
.idata 2560 bb5485bf968b970e5ea81292af2acdba
.tls 0 00000000000000000000000000000000
.rdata 512 9ba824905bf9c7922b6fc87a38b74366
.reloc 0 00000000000000000000000000000000
.rsrc 23552 24defd68fca386c148b1c6b29220e1bd

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for Win_8.1_activator.exe
copyright for information about Win_8.1_activator.exe