How to remove “HackTool.KMS.A5”?

The HackTool.KMS.A5 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What HackTool.KMS.A5 virus can do?

Sample contains Overlay data
Authenticode signature is invalid

How to determine HackTool.KMS.A5?


File Info:
name: 28F604D6DF8AB3D5AE3D.mlw
path: /opt/CAPEv2/storage/binaries/91a38b3973461c6a28a23093b861a68b99106f636a0ae4450f3c60fded4df5dd
crc32: 6EA6D814
md5: 28f604d6df8ab3d5ae3d6535af62b33d
sha1: 0925a08e509ec6cc37ae8e0b88ac1b74b9e43065
sha256: 91a38b3973461c6a28a23093b861a68b99106f636a0ae4450f3c60fded4df5dd
sha512: 50256676986754fe459880abfdc8b9d7a468d120e3ee07d02c55259cbe104b616a2231dc8115f0c5c30e39bccb44728164972b508382481ef3e8ddbaeec78c2c
ssdeep: 3072:KqncjpGE1qYwt/pN7T0t+3TXvdlSpjRPXX8hqo7Ey+6n+zzuqXX6nDYivMvLXUx3:KbjpGaqDA4BcRxwb+zb6nUQxqo
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T18E449E127B91C075D5B3027649F89736443DFE610B61AACBB3D80F5E6A350C2AB31B67
sha3_384: 9d37ba83b432ef549f6ba8e8a854e28e55d96d15d0a0c4ce84f1881ad38bff43fa43a0cdb632ac3db0b144e86c2a1aac
ep_bytes: ff83c40c8bf08975dc85db750656e856
timestamp: 2013-02-13 23:29:37

Version Info:
0: [No Data]

HackTool.KMS.A5 also known as:

Bkav	W32.AIDetect.malware1
FireEye	Generic.mg.28f604d6df8ab3d5
CAT-QuickHeal	HackTool.KMS.A5
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/grayware_confidence_90% (W)
BitDefenderTheta	Gen:NN.ZexaF.34806.quX@a8FwQam
ClamAV	Win.Tool.Kmsactivator-9780682-0
Kaspersky	HEUR:HackTool.Win32.KMSAuto.gen
Comodo	Application.Win32.HackKMS.DS@5nuvyt
Baidu	Win32.Trojan.Generic.i
SentinelOne	Static AI – Malicious PE
Trapmine	suspicious.low.ml.score
Ikarus	Trojan.Win32.Skeeyah
Microsoft	HackTool:Win32/AutoKMS
ZoneAlarm	HEUR:HackTool.Win32.KMSAuto.gen
APEX	Malicious
Rising	Trojan.Generic@AI.95 (RDML:oU2fuC3pSxC8T2hFNBYH/Q)
MaxSecure	Trojan.Malware.300983.susgen
Cybereason	malicious.6df8ab

How to remove HackTool.KMS.A5?

HackTool.KMS.A5 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X