Threat Database Hacktool PUP.HackKMS.B

PUP.HackKMS.B

By CagedTech in Hacktool
Published:
Last updated:

Threat Scorecard

Popularity Rank: 14,897
Threat Level: 10 % (Normal)
Infected Computers: 2,830
First Seen: July 24, 2009
Last Seen: August 22, 2026
OS(es) Affected: Windows

Your system has been detected with PUP.HackKMS.B, a potentially unwanted program that may pose risks to your computer's security and performance. This detection indicates that your system may be compromised, and it's essential to take immediate action to remove the threat and prevent further damage.

What Is PUP.HackKMS.B?

PUP.HackKMS.B is a type of potentially unwanted program that can be installed on your system without your knowledge or consent. It may be bundled with other software or downloaded from the internet, and its primary purpose is to perform unwanted actions on your system. PUPs like PUP.HackKMS.B can be used to display unwanted advertisements, collect user data, or even install additional malware on your system.

How PUP.HackKMS.B Operates

PUP.HackKMS.B operates by exploiting vulnerabilities in your system's security or by using social engineering tactics to trick you into installing it. Once installed, it can run in the background, consuming system resources and performing its malicious activities. PUPs like PUP.HackKMS.B can also communicate with their command and control servers to receive updates or transmit stolen data.

It's essential to note that PUPs can be difficult to detect, as they often disguise themselves as legitimate programs or system files. However, their behavior can be identified by monitoring system activity, such as unusual network traffic, suspicious registry changes, or unfamiliar programs running in the background.

Symptoms of Infection

If your system is infected with PUP.HackKMS.B, you may notice several symptoms, including slow system performance, unwanted advertisements or pop-ups, and unfamiliar programs or icons on your desktop. You may also experience browser redirects, homepage changes, or suspicious search results. In some cases, PUPs can also cause system crashes, freezes, or errors.

  • Unwanted advertisements or pop-ups
  • Slow system performance
  • Unfamiliar programs or icons on your desktop
  • Browser redirects or homepage changes
  • Suspicious search results
  • System crashes, freezes, or errors

How to Remove PUP.HackKMS.B

  1. Boot your system in Safe Mode with Networking to prevent PUP.HackKMS.B from running and to allow for a clean removal process.
  2. Run a full scan with a reputable anti-malware tool, such as SpyHunter, to detect and remove all instances of PUP.HackKMS.B and any associated malware.
  3. Uninstall any suspicious programs or applications that may be related to PUP.HackKMS.B.
  4. Reset your web browsers, including Chrome, Firefox, and Edge, to their default settings to remove any malicious extensions or add-ons.
  5. Reboot your system and run another full scan with your anti-malware tool to ensure that PUP.HackKMS.B has been completely removed.

Conclusion

Removing PUP.HackKMS.B from your system requires careful attention to detail and a thorough cleaning process. By following the steps outlined above, you can help ensure that your system is free from this potentially unwanted program and any associated malware. Remember to always be cautious when downloading software or clicking on links from unknown sources, and keep your anti-malware tools up to date to protect your system from future threats.

Aliases

15 security vendors flagged this file as malicious.

Antivirus Vendor Detection
AVG Downloader.Adload.JM
Prevx1 Cloaked Malware
Ikarus AdWare.NetAdware.S
AVG Downloader.Adload.LO
Authentium W32/Adware-Vapsup!Maximus
CAT-QuickHeal Trojan.Vapsup.elq
CAT-QuickHeal Trojan.Vapsup.eth
Prevx1 Downloader.Zlob
AVG Downloader.Zlob.ACE
AVG Downloader.Zlob.ABX
Prevx1 Malicious Software
AVG Downloader.Adload.IB
Avast Win32:Vapsup-GB
Ikarus Virus.Win32.Agent.LTS
AVG Downloader.Adload.IM

File System Details

PUP.HackKMS.B may create the following file(s):
# File Name MD5 Detections
1. pxgdslro.dll 08aae34d5e4b129eb6583a6b874cdc4b 0
2. vltdfabw.dll 9b60b79f0cbdb81aa14bcb9b28d8b8c2 0
3. btrklfr.dll cd465a1ea0dfc6fe14197d85fd52bfd6 0
4. bokpkov.dll 9fa9ca984b34b47a24d4fd1e2e9b3a90 0
5. wetkadmr.dll c51e04f657ffa39dc7a5d307e1c49dba 0
6. bxlrvps.dll 0bb1fc355715110e3cc72c99eaa6b4de 0
7. vbksrofa.dll dfc60e1d007838a627ae0ca870ea6cfd 0
More files

Analysis Report

General information

Family Name: PUP.HackKMS.B
Signature status: No Signature

Known Samples

MD5: 7395d107e9c0c97d5e73af9dd116a752
SHA1: 1af4f66d7e95c6cc6b579b86744173e17e85558a
SHA256: 7C182D241D0DF02FE4E4226E9D1149650372FC1A7F8DBC1E8BF4E1EC2EE82D08
File Size: 151.62 KB, 151622 bytes
MD5: 7ae209e7a5f36aad9debfdb5c4ee1c85
SHA1: e81318c4922bbec74aebc70280c8e5ae3bf2f251
SHA256: BD40AD57CB61073C0F95F63A64595D1073B14884ECF45C120D95E8AE93A0C624
File Size: 151.62 KB, 151622 bytes
MD5: 75ce3e48b6008967b743a7826b656650
SHA1: 90963828d048645658f6b46aa28afa6a4f184831
SHA256: 0BD4769054F14E0DAAD4F47CC5FEF4EF30F382AE4AAA68B302CCE61F87DEC136
File Size: 151.62 KB, 151622 bytes
MD5: e602509f2338ed98c0c0f38f51b6ca88
SHA1: 69af99ff68b80f13cfc3430c16cb167a9b7483e2
SHA256: 8161F155F5B56F11CF48DF61E05AE923E6B93273B3E10F48F4B37DA9EEA099D6
File Size: 151.62 KB, 151622 bytes
MD5: bc10323c1c4b98c7485108468ad50044
SHA1: cb7e9040e8f2b4d69ce28f2794fdeb6274e8eac5
SHA256: E5A8E8148ACAC1B0FA4C8E6329C00A88C4FD6B1EA429E63233D03AB155A39E03
File Size: 151.62 KB, 151622 bytes
Show More
MD5: 69b59b77d8418aaaf30225ac66157bbe
SHA1: 8a5f1bec1d928b49421778cb8d7d24cd4adf2343
SHA256: 613F2CFDCC9C8E3BEE3E4AD6C817FF975D39E1BDF267885110DE7DE190EDCDB0
File Size: 151.62 KB, 151622 bytes
MD5: ea330a6fad005530659686867dec2c1f
SHA1: 6bbf829420ad0e74d5929e4db4acaaec780e4779
SHA256: 1BD887084009577DB1D8ADDBCE3811E39ADA35F23CEBA2F3FF46521FD9723398
File Size: 151.62 KB, 151622 bytes

Windows Portable Executable Attributes

  • File doesn't have "Rich" header
  • File doesn't have debug information
  • File doesn't have exports table
  • File doesn't have relocations information
  • File doesn't have resources
  • File doesn't have security information
  • File is 32-bit executable
  • File is console application (IMAGE_SUBSYSTEM_WINDOWS_CUI)
  • File is either console or GUI application
  • File is Native application (NOT .NET application)
Show More
  • File is not packed
  • IMAGE_FILE_DLL is not set inside PE header (Executable)
  • IMAGE_FILE_EXECUTABLE_IMAGE is set inside PE header (Executable Image)

File Traits

  • HighEntropy
  • No Version Info
  • x86

Block Information

Total Blocks: 184
Potentially Malicious Blocks: 170
Whitelisted Blocks: 14
Unknown Blocks: 0

Visual Map

x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x 0 0 x 0 x x x 0 x x 0 x x x x x x x x x x 0 0 x x x x 0 x x x x x x x x x x x 0 x x x x x x 0 x x x x x 0 x 0 x x x x x x x x x x x x 0 x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x 0 x x x x x x x x x x x x x x x x x x x x x x x x x x x x
0 - Probable Safe Block
? - Unknown Block
x - Potentially Malicious Block

Similar Families

  • HackKMS.B