How to remove {614F70F9-433B-4A07-B80D-DB7F9C57D993}

{614F70F9-433B-4A07-B80D-DB7F9C57D993}

The module {614F70F9-433B-4A07-B80D-DB7F9C57D993} has been detected as Hack.AutoKMS

{614F70F9-433B-4A07-B80D-DB7F9C57D993}
Remove {614F70F9-433B-4A07-

File Details

Product Name:

mini-KMS Activator v1.3 Office2010 VL RUS
Company Name:

FreeSoft
MD5: 359d5c6a3976c2ac565adb2cc9a85014
Size: 1019 KB
First Published: 2017-07-13 07:05:45 (6 years ago)
Latest Published: 2020-12-12 18:07:10 (3 years ago)
Status: Hack.AutoKMS (on last analysis)
Analysis Date: 2020-12-12 18:07:10 (3 years ago)

Common Places:

%desktop%\smartbuy\install\office 2010\mini-kms activator
%sysdrive%\прог\ворд
%sysdrive%\program\microsoft office 2010 install
%programfiles%
%sysdrive%\down\office 2010
%sysdrive%\setup\activator_v1.3_office_2010_\activator_v1.3_office_2010_
%sysdrive%\programs\office 2010\activators_office2010\activators_office2010
%sysdrive%\desktop 2017\office 2010
%sysdrive%\desktop 08.12.2016\flashka
%profile%\downloads\office 2010

File Names:

mini-KMS_Activator_v1.3_Office2010_VL_RUS.exe
activator_1.3.exe
Activator v1.3 Office2010_VL_RUS.exe
mini-kms_activator_v1.3_office2010_vl_rus.exe
mini-KMS Activator 1.3 Office 2010 VL.exe
Activator Office 2010.exe
{614F70F9-433B-4A07-B80D-DB7F9C57D993}

Geography:

47.4%
29.5%
5.1%
3.8%
2.6%
2.6%
2.6%
1.3%
1.3%
1.3%
1.3%
1.3%

OS Version:

Windows 7 65.4%
Windows 10 25.6%
Windows XP 2.6%
Windows 8.1 2.6%
Windows Server 2012 1.3%
Windows Vista 1.3%
Windows Server 2012 R2 1.3%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00272970

PE Sections:

Name Size of data MD5
UPX0 0 00000000000000000000000000000000
UPX1 1013248 45bdfad75f65f4575db2a2f6dd1c1fe3
.rsrc 29696 35f478cd3af9ebcf0737112d64d88017

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for {614F70F9-433B-4A07-B80D-DB7F9C57D993}
copyright for information about {614F70F9-433B-4A07-B80D-DB7F9C57D993}