PUP.Optional.KMSpico

KMSpico is a software that usually installs without your knowledge with free software downloads. KMSpico is an activator of Microsoft Windows and Microsoft Office license. It propagates via shared networks Peer To Peer sites of cracks and keygens. Identified the 03/07/2013.

KMSpico

Features:

– It belongs to a family of PUP (Potentially Unwanted Program).
– Vendor : PUP.Optional

Main actions :

– It installs as a process launched at startup of the system (RP),
– It installs as a service to be launched each time the system (O23),(SS/SR).
– It starts a task planned in automatic (O39),
– It installs as a program (O42),
– It creates to many registry keys ‘Software’
– It creates additional folders (O43),
– It installs a process of variable size to the level of the system folders (O44)
– It moved to the Windows prefetcher folder (O45).
– It installs as a registry key Image File Execution Options (IFEO) (O50)
– It creates multiple files users (O61),
– It creates an active incoming connection in the application of the firewall Windows exceptions (O87),

ZHPDiag report:

– (.@ByELDI – Service_KMS.) — C:Program FilesKMSpicoService_KMS.exe
O23 – Service: Service KMSELDI (Service KMSELDI) . (.Pas de propriétaire – Service_KMS.) – C:Program FilesKMSpicoService_KMS.exe
O23 – Service: Service KMSELDI (Service KMSELDI) . (.@ByELDI – Service_KMS.) – C:Program FilesKMSpicoService_KMS.exe
(…) — C:Program FilesKMSpicoAutoPico.exe
(.@ByELDI.) — C:Program FilesKMSpicoAutoPico.exe
O39 – APT: AutoPico Daily Restart – (.@ByELDI.) — C:WindowsSystem32TasksAutoPico Daily Restart
O42 – Logiciel: KMSpico 6 – (…) — KMSpico v6_is1
O42 – Logiciel: KMSpico v9.1.3 – (…) — KMSpico_is1
O42 – Logiciel: KMSpico v9.3.3 – (…) — {8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1
O43 – CFD: 2013-08-28 – 04:51:41 – —-D C:Program FilesKMSpico
O44 – LFC: – 03/07/2013 – 10:59:04 –H– . (…) — C:WindowsSysNativeKMSWrapper64.dll
O44 – LFC: – 03/07/2013 – 10:59:04 RSHAD . (…) — C:WindowsSystem32KMSWrapper64.dll
O50 – IFEO:Image File Execution Options – SppExtComObj.exe – C:WindowsSECOH-QAD.exe
O61 – LFC: 11/06/2014 – 12:15:57 R–A- . (…) — C:UsersCoolmanDownloadsKMSpico 9.1.3 FinalKMSpico_setup.exe
O87 – FAEL: “{99B61BCF-CC78-4A3C-9DCB-45CEF263B034}” .(.@ByELDI – Service_KMS.) — C:Program FilesKMSpicoService_KMS.exe
O87 – FAEL: “{8E37387C-25DA-4EA3-8F5D-34EEF5321D02}” .(.@ByELDI – Service_KMS.) — C:Program FilesKMSpicoService_KMS.exe
SR – | Auto 284160 | (Service KMSELDI) . (…) – C:Program FilesKMSpicoService_KMS.exe

C:ProgramDataMicrosoftWindowsStart MenuProgramsKMSpico
C:Program FilesKMSpico

Remove:

– Remove software in Windows Configuration Panel,
Remove with ZHPcleaner

Diagnose with ZHPDiag

1 Vote2 Votes3 Votes4 Votes5 Votes (No Ratings Yet)
SOSVirusLoading...

Leave a Comment