How to remove $R0IVZUR.dll

$R0IVZUR.dll

The module $R0IVZUR.dll has been detected as Risk.RemoteAdmin

$R0IVZUR.dll
Remove $R0IVZUR.dll

File Details

Product Name:

Remote Manipulator System
Company Name:

TektonIT
MD5: 59068498190113e051d94fd0b5ef98aa
Size: 150 KB
First Published: 2017-07-22 04:06:08 (6 years ago)
Latest Published: 2019-09-15 23:14:18 (4 years ago)
Status: Risk.RemoteAdmin (on last analysis)
Analysis Date: 2019-09-15 23:14:18 (4 years ago)

Overview

Signed By: Ter-Osipov Aleksey Vladimirovich
Status: Valid

Common Places:

%programfiles%\remote manipulator system - host
%appdata%\rms-agent\68001\abc09f8c72
%appdata%\rms-agent\68001\39a0515df8
%desktop%\новая папка\rms.host.6.8.ru\data1
%desktop%\agent
%profile%\downloads\agent
%appdata%\rms-agent\68001
%programfiles%
%sysdrive%\проги\rms
%desktop%

File Names:

RIPCServer.dll
$R0IVZUR.dll
ripcserver.dll

Geography:

60.0%
25.0%
5.0%
5.0%
2.5%
2.5%

OS Version:

Windows 10 55.0%
Windows 7 40.0%
Windows Server 2008 R2 2.5%
Windows 8.1 2.5%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x13140000
Entry Address: 0x0001d518

PE Sections:

Name Size of data MD5
.text 113152 cc4b334bfccb096e0390f868ed798f2a
.itext 1536 d64eb432d2f22f691ef2711aa921ba47
.data 7680 61f7195ff11f6f93be5025080862cb86
.bss 0 00000000000000000000000000000000
.idata 3584 4c48cd5ae18c24da0a13b0e94da6bdf9
.didata 512 de2f1a99379061435ea06be6484727f9
.edata 512 0424e5ec0f38457c60f9e1beaddc408a
.rdata 512 27666cc3e23727433a157dc83a9d907f
.reloc 11776 d7326a450dc061240e213746c19a7801
.rsrc 6144 ca77ba9d8b53c3722f49a4346b406890

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for $R0IVZUR.dll
copyright for information about $R0IVZUR.dll