HackTool:Win32/AutoKMS!pz removal guide

The HackTool:Win32/AutoKMS!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What HackTool:Win32/AutoKMS!pz virus can do?

Sample contains Overlay data
Authenticode signature is invalid

How to determine HackTool:Win32/AutoKMS!pz?


File Info:
name: 65D90C138CFFF3E968B0.mlw
path: /opt/CAPEv2/storage/binaries/ad7628478ab65fe24647ad5eaba627a5e1be529d85d6e0c2affec48f0fd094b4
crc32: CA480544
md5: 65d90c138cfff3e968b0a20ab8e5e7ac
sha1: e14eb565097b37d2dc492abc5399c30848bb4170
sha256: ad7628478ab65fe24647ad5eaba627a5e1be529d85d6e0c2affec48f0fd094b4
sha512: 8c51e29a5586c39dd208014b92abede35d6c4a1c53f6032a1976484a09aedc09a2a6114b674ceed39706af4b3cbeaf7a6faa28653a502f76567a4ddd687395f3
ssdeep: 3072:limnSqvg5laDT+i1fvyKCI5l5ARSpkzgB65+eSCRR+VTeqGvBFzcSk1+QI:lyq4X4vZjlYSizi6DL+Vl6BcMQI
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1DD449D2077818076D5B303B946F99B36417DFA620B755ACBB3D80F6E1A705C2AB32357
sha3_384: 100cfedab81c5c93dd04085ab6d95ea27020f54d2132495b6ac2aeb5b3d6e28d12e25315be48aee31077f7bd377dc9db
ep_bytes: e899980000e987feffffcccccccccccc
timestamp: 2013-03-03 03:03:45

Version Info:
0: [No Data]

HackTool:Win32/AutoKMS!pz also known as:

Lionic	Riskware.Win32.Generic.1!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Application.Hacktool.KMSActivator.AS
FireEye	Generic.mg.65d90c138cfff3e9
CAT-QuickHeal	PUA.HacKMS.A5
Skyhigh	BehavesLike.Win32.Tool.dh
McAfee	Tool-KMS
Cylance	unsafe
Zillya	Tool.KMSAuto.Win32.3
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/grayware_confidence_100% (W)
K7GW	Hacktool ( 004664381 )
K7AntiVirus	Hacktool ( 004664381 )
VirIT	Trojan.Win32.Genus.JWB
Symantec	PUA.Keygen.KMS
ESET-NOD32	a variant of Win32/HackTool.KMSAuto.A potentially unsafe
ClamAV	Win.Trojan.Hacktool-1829
Kaspersky	HackTool.Win32.KMSAuto.ejp
BitDefender	Application.Hacktool.KMSActivator.AS
NANO-Antivirus	Trojan.Win32.KMSAuto.ekshzw
SUPERAntiSpyware	Hack.Tool/Gen-KMS
Avast	Win32:MiscX-gen [PUP]
Emsisoft	Application.Hacktool.KMSActivator.AS (B)
Baidu	Win32.Trojan.Generic.i
DrWeb	Tool.KMS.12
VIPRE	Application.Hacktool.KMSActivator.AS
TrendMicro	HKTL_KMSAUTO_EK040320_UVPM
Trapmine	malicious.high.ml.score
Sophos	KMS Activator (PUA)
Ikarus	not-a-virus:Activator.KMS
Jiangmin	Trojan.Generic.fyar
Google	Detected
Varist	W32/A-0b50412c!Eldorado
Antiy-AVL	HackTool/Win32.KMSAuto.a
Kingsoft	malware.kb.a.842
Microsoft	HackTool:Win32/AutoKMS!pz
Xcitium	Application.Win32.HackKMS.DS@5nuvyt
Arcabit	Application.Hacktool.KMSActivator.AS
ZoneAlarm	HackTool.Win32.KMSAuto.ejp
GData	Win32.Riskware.HackKMS.E
Cynet	Malicious (score: 100)
AhnLab-V3	PUP/Win32.KMS.R174857
Acronis	suspicious
ALYac	Application.Hacktool.KMSActivator.AS
MAX	malware (ai score=73)
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/CI.A
TrendMicro-HouseCall	HKTL_KMSAUTO_EK040320_UVPM
Rising	Trojan.Upatre!8.648F (RDMK:cmRtazrc9pcNjjPdwc7gixqZ4osM)
Yandex	Riskware.HackTool!0TxuXZFEu+8
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.1728101.susgen
Fortinet	W32/HacktoolKms.9A19!tr
AVG	Win32:MiscX-gen [PUP]
DeepInstinct	MALICIOUS
alibabacloud	Tool:Win/Kmsauto.3c6b9fb3

How to remove HackTool:Win32/AutoKMS!pz?

HackTool:Win32/AutoKMS!pz removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X