About “Application.KMSActivator.5” infection

The Application.KMSActivator.5 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Application.KMSActivator.5 virus can do?

Starts servers listening on 0.0.0.0:1688, :0
Anomalous binary characteristics

How to determine Application.KMSActivator.5?


File Info:
crc32: B0576B6C
md5: 01a80aad5dabed1c1580f7e00213cf9d
name: 01A80AAD5DABED1C1580F7E00213CF9D.mlw
sha1: 174f9e420ab6c21e59ff7a0e42b8ebb3d742f0ec
sha256: fd7499214abaa13bf56d006ab7de78eb8d6adf17926c24ace024d067049bc81d
sha512: f254dfc103f79093bbae02d03d5906aafab7a94fa946373037407c270e67f0eb7972f8524cf2d98129bf6af2b8ba50f4ba0fb2b31d9d7b4dcb45d79e689d325b
ssdeep: 384:ZwpXyDvPidEhiXOOB9deeQmKnIicEcXTdof0mhBjpLfh/oCqkg4XZmblE7llJmY:Zwsbi4i9QebPsnUrukDDd828fRRT
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (c) 2014
InternalName: KMSSS.exe
FileVersion: 2.0.7.0
CompanyName: MSFree Inc.
ProductName: KMS emulator by Ratiborus
ProductVersion: 2.0.7.0
FileDescription: KMS emulator by Ratiborus.
OriginalFilename: KMSSS.exe
Translation: 0x0400 0x04b0

Application.KMSActivator.5 also known as:

K7AntiVirus	Unwanted-Program ( 005194ac1 )
MicroWorld-eScan	Gen:Variant.Application.KMSActivator.5
CAT-QuickHeal	Trojan.IGENERIC
K7GW	Unwanted-Program ( 005194ac1 )
Cybereason	malicious.d5dabe
Cyren	W32/Trojan.NVWL-7899
ESET-NOD32	a variant of Win32/HackKMS.AL potentially unsafe
GData	Gen:Variant.Application.KMSActivator.5
Kaspersky	HackTool.Win32.KMSAuto.ew
BitDefender	Gen:Variant.Application.KMSActivator.5
Tencent	Win32.Hacktool.Kmsauto.Eeq
Ad-Aware	Gen:Variant.Application.KMSActivator.5
Sophos	Mal/Generic-S
Comodo	Malware@#2kj9sbhmec0is
Zillya	Tool.KMSAuto.Win32.379
McAfee-GW-Edition	GenericRXGK-GL!01A80AAD5DAB
Emsisoft	Gen:Variant.Application.KMSActivator.5 (B)
SentinelOne	DFI – Suspicious PE
Endgame	malicious (high confidence)
Antiy-AVL	Trojan/Win32.Azden
Microsoft	HackTool:Win32/AutoKMS
Jiangmin	HackTool.KMSAuto.dk
Arcabit	Trojan.Application.KMSActivator.5
AegisLab	Hacktool.Win32.KMSAuto.3!c
ZoneAlarm	HackTool.Win32.KMSAuto.ew
Acronis	suspicious
McAfee	GenericRXGK-GL!01A80AAD5DAB
MAX	malware (ai score=100)
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R002C0OJ918
Rising	Trojan.Tiggre!8.ED98 (CLOUD)
Yandex	PUP.Agent!
Ikarus	PUA.HackKMS
Fortinet	Riskware/HackKMS

How to remove Application.KMSActivator.5?

Application.KMSActivator.5 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X