Home > Threat descriptions >



Category:  PUA

Type:  Hack-Tool

Platform:  W32

Aliases:  Application.Hacktool.KMSActivator.[variant]


An activator program that is used to activate installations of the Windows operating system.


Automatic action

Based on the settings of your F-Secure security product, it will either prompt you for a desired action, allow the program to run, block access to the program but leave it in place, or move it to the quarantine where it cannot harm your device.

Knowledge Base

Find the latest advice in our Community Knowledge Base.

About the product

See the manual for your F-Secure product on the Help Center.

Contact Support

Chat with or call an expert for help.

Submit a sample

Submit a file or URL for further analysis.

Technical Details

There are a number of well-known activator programs, including KMSActivator, KMSAuto and KMSpico. These utility programs are used to activate installations of the Windows operating system, often to remove the trial or grace period limitations.

The activator programs work by circumventing the standard activation process, which normally involves the installation connecting to Microsoft's own servers. Instead, the activator programs create an emulated Key Management Service (KMS) server on the local network, then redirects the installation to that server for activation.

Legal and security concerns

The legality of using a hack-tool can vary widely depending on the laws of the country and specific details of how it is used. There have also been reports of activator programs being bundled with other unwanted or harmful programs.