About “Application.Hacktool.KMSActivator.AQ” infection

The Application.Hacktool.KMSActivator.AQ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Application.Hacktool.KMSActivator.AQ virus can do?

Sample contains Overlay data
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Application.Hacktool.KMSActivator.AQ?


File Info:
name: DED06E8020D7D08EF897.mlw
path: /opt/CAPEv2/storage/binaries/f9357c11aab45ef7315b17c30f8af6bb7d4918c45372ac985a47c69404ce8657
crc32: 3A5431FD
md5: ded06e8020d7d08ef897d2ab927a0998
sha1: 63d4212991c43e04b7a778321a7e31114997855e
sha256: f9357c11aab45ef7315b17c30f8af6bb7d4918c45372ac985a47c69404ce8657
sha512: 2dd7f465129c55f2259074eed0aaab5315e18c83b5f1efebb0f49178a887b07c173fa73e16eda19126ac6414952d801b5f6487dbac37ec442a3cadf2f2b697b3
ssdeep: 1536:HvLFF/n1FcSPZvSzc5i5hpLzsX1neB7oLEFgCr6kwziMfE5z4FgDFCF0QMyZzMeI:HvBFzcSkAi5hZsX21FhmfEiFgD4FL
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T152F41B399798D961C29E8678C0E0752982F8C2176717FE0A9CC794E42A327C37C4D9B7
sha3_384: 0d2f21e703585cca92b80f83f04674adf3a1904ac2804c81c6e3ea8fbafcb91ecbd242e798be8507682c13b07cb91a16
ep_bytes: 00000000000000000000000000000000
timestamp: 2016-01-11 22:28:05

Version Info:
0: [No Data]

Application.Hacktool.KMSActivator.AQ also known as:

Bkav	W32.AIDetectMalware.CS
Lionic	Hacktool.Win32.KMSActivator.3!c
MicroWorld-eScan	Application.Hacktool.KMSActivator.AQ
FireEye	Generic.mg.ded06e8020d7d08e
Skyhigh	Artemis!PUP
McAfee	Artemis!DED06E8020D7
Cylance	unsafe
Zillya	Trojan.Kryptik.Win32.991097
Sangfor	Hacktool.Win32.Agent.V3sp
Alibaba	HackTool:Win32/AutoKMS.19b76b66
CrowdStrike	win/grayware_confidence_100% (D)
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Application.Hacktool.KMSActivator.AQ
Avast	Win32:PUP-gen [PUP]
Rising	Trojan.Generic@AI.100 (RDML:onxSXg9kFqcCGndg4Czm6A)
Emsisoft	Application.Hacktool.KMSActivator.AQ (B)
VIPRE	Application.Hacktool.KMSActivator.AQ
Sophos	Generic Reputation PUA (PUA)
Ikarus	HackTool.Win32.AutoKMS
GData	Application.Hacktool.KMSActivator.AQ
Google	Detected
Antiy-AVL	RiskWare[NetTool]/Win64.RPCHook
Kingsoft	malware.kb.a.998
Arcabit	Application.Hacktool.KMSActivator.AQ
Varist	W32/S-0ff9a212!Eldorado
ALYac	Application.Hacktool.KMSActivator.AQ
MAX	malware (ai score=79)
Malwarebytes	MachineLearning/Anomalous.100%
Zoner	Trojan.Win32.65636
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.11983718.susgen
Fortinet	Riskware/Application
AVG	Win32:PUP-gen [PUP]
DeepInstinct	MALICIOUS

How to remove Application.Hacktool.KMSActivator.AQ?

Application.Hacktool.KMSActivator.AQ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X