Dropped:Application.Hacktool.KMSActivator.BG information

The Dropped:Application.Hacktool.KMSActivator.BG is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Dropped:Application.Hacktool.KMSActivator.BG virus can do?

Creates RWX memory
Detected script timer window indicative of sleep style evasion
Reads data out of its own binary image
A process created a hidden window
Drops a binary and executes it
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
A scripting utility was executed
Uses Windows utilities for basic functionality
Checks for the presence of known windows from debuggers and forensic tools
Network activity detected but not expressed in API logs
Attempts to interact with an Alternate Data Stream (ADS)

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Dropped:Application.Hacktool.KMSActivator.BG?


File Info:
crc32: 3D828A78
md5: be7563a984dc5168ce14181b90432859
name: BE7563A984DC5168CE14181B90432859.mlw
sha1: b98280f7310095da26de3e448beb489998f74c54
sha256: e9045c4012cdfd4f2911db303478527e2006aa3b148dfdbacae85b4ee3b52e5e
sha512: 363339b8c932c69473ae34daad38fb0f86979a6173a2ca570b28a767251299af97c81376a2b1c41f2eeabe86e6933a332f9c891d9eb2ba4893910fee1c6d3f12
ssdeep: 24576:kF8B9/XCfoX5IgBIeepfBLwtQVReC5Tt9T:I8j+g+XZd5TtN
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
LegalCopyright: xa9 2010, FreeSoft
InternalName: mini-KMS_Activator_v1.3_Office2010_VL_ENG.exe
FileVersion: 1,3,0,0
CompanyName: FreeSoft
ProductName: mini-KMS Activator v1.3 Office2010 VL ENG
ProductVersion: 1,3,0,0
FileDescription: mini-KMS Activator
Translation: 0x0000 0x04e4

Dropped:Application.Hacktool.KMSActivator.BG also known as:

K7AntiVirus	Unwanted-Program ( 004dfde01 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
CAT-QuickHeal	Trojan.Generic.S146517
ALYac	Dropped:Application.Hacktool.KMSActivator.BG
Cylance	Unsafe
Sangfor	Hacktool.Win32.KMSAuto.i
CrowdStrike	win/malicious_confidence_100% (D)
BitDefender	Dropped:Application.Hacktool.KMSActivator.BG
K7GW	Unwanted-Program ( 004dfde01 )
Cybereason	malicious.984dc5
Cyren	W32/Risk.FWIT-3175
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Hidcon.B potentially unsafe
APEX	Malicious
ClamAV	Win.Trojan.Keygen-41
Kaspersky	HackTool.Win32.KMSAuto.i
Alibaba	HackTool:Win32/KMSAuto.18b55dc1
ViRobot	Patcher.Office.1042432
MicroWorld-eScan	Dropped:Application.Hacktool.KMSActivator.BG
Tencent	Malware.Win32.Gencirc.10ce5335
Ad-Aware	Dropped:Application.Hacktool.KMSActivator.BG
Sophos	Keygen (PUA)
Comodo	ApplicUnwnt@#39a4xxui0gb3s
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	HKTL_KEYGEN
FireEye	Dropped:Application.Hacktool.KMSActivator.BG
Emsisoft	Dropped:Application.Hacktool.KMSActivator.BG (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	HackTool.KMSAuto.iv
Webroot	W32.Malware.Gen
eGambit	Unsafe.AI_Score_99%
Microsoft	HackTool:Win32/Gendows
AegisLab	Hacktool.Win32.KMSAuto.tpni
GData	Win32.Riskware.HackKMS.G
AhnLab-V3	Unwanted/Win32.KMSActivator.R220469
MAX	malware (ai score=99)
Malwarebytes	RiskWare.Tool.CK
Panda	PUP/Crack
TrendMicro-HouseCall	HKTL_KEYGEN
Yandex	Trojan.Igent.bUwF4S.18
Ikarus	HackTool.HackKMS
MaxSecure	Trojan.Malware.850124.susgen
Fortinet	Riskware/KMSAuto
Paloalto	generic.ml

How to remove Dropped:Application.Hacktool.KMSActivator.BG?

Dropped:Application.Hacktool.KMSActivator.BG removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Dropped:Application.Hacktool.KMSActivator.BG information