We received the file KCMUSIC.EXE and detected that KCMUSIC.EXE is not good.
KCMUSIC.EXE is Adware. You should remove the file KCMUSIC.EXE.
Kill the process KCMUSIC.EXE and remove KCMUSIC.EXE from Windows.
Malware Analysis of KCMUSIC.EXE
Full path on a computer: %Program Files%\KcBox\KcMusi_59329\KcMusic.exe
Detected by UnHackMe:
KCMUSIC.EXE
Default location: %Program Files%\KcBox\KcMusi_59329\KcMusic.exe
Removal Results: Success
Number of reboot: 1
KCMUSIC.EXE is known as:
Adware.FlyStudio
KCMUSIC.EXE hash:
- MD5: bdc7672b574d3f3eff13b4291b3883cf
The file tries to connect to the dangerous web site.
How to quickly detect KCMUSIC.EXE presence?
Registry:
- HKLM\Software\Classes\Applications\: “Setup[26]-kc.exe”
- HKLM\Software\Classes\Applications\KcMusic\Shell\open\command\: “”%Program Files%\KcBox\KcMusi_59329\KcMusic.exe” “%1″”
- HKLM\Software\Classes\Applications\KcMusic.exe\Shell\open\command\: “”%Program Files%\KcBox\KcMusi_59329\KcMusic.exe” “%1″”
- HKLM\Software\Classes\Applications\KcMusic.exe\Shell\Playlist\Command\: “”%Program Files%\KcBox\KcMusi_59329\KcMusic.exe” /list “%1″”
- HKLM\Software\Classes\Applications\KcMusic.exe\Shell\Playlist\: “?OEe OoAO?i?