How to remove $R5ICQYP.dll
- File Details
- Overview
- Analysis
$R5ICQYP.dll
The module $R5ICQYP.dll has been detected as Adware.ELEX
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
62df426a805baa136dd81d72b85a2a02 |
| Size: |
1 MB |
| First Published: |
2017-05-24 11:10:30 (7 years ago) |
| Latest Published: |
2019-10-12 19:31:17 (4 years ago) |
| Status: |
Adware.ELEX (on last analysis) |
|
| Analysis Date: |
2019-10-12 19:31:17 (4 years ago) |
Overview
| %programfiles%\firefox |
| %sysdrive%\adwcleaner\quarantine\files\rszejbxwtcmauudlsqitlujsdrmndwbk |
| %sysdrive%\$recycle.bin\s-1-5-21-1515912927-174380303-3839714098-1001\$ray0gxo |
| %sysdrive%\$recycle.bin\s-1-5-21-3737494481-1270847105-2955528620-1000 |
| %sysdrive%\adwcleaner\quarantine\files\tpcysuvkwihevhehjjthgqodwqcmcura |
| %sysdrive%\adwcleaner\quarantine\files\pdtyxugckxueyuxrhshgxdjblezsdqrw |
| %sysdrive%\adwcleaner\quarantine\files\mjxftjlavkjfpqywfokrhiyzuuxwsoxt |
| %sysdrive%\quarantine_mzk\folders\201705258450847\firefox. 9.15.57.25 |
| %programfiles% |
| %appdata%\zhp\quarantine\zhpcleaner |
|
28.4% |
|
|
11.6% |
|
|
10.3% |
|
|
8.4% |
|
|
8.4% |
|
|
6.5% |
|
|
5.2% |
|
|
2.6% |
|
|
1.9% |
|
|
1.9% |
|
|
1.9% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
| Windows 7 |
48.7% |
|
| Windows 10 |
38.5% |
|
| Windows 8.1 |
9.6% |
|
| Windows 8 |
2.6% |
|
| Windows Server 2012 R2 |
0.6% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x10000000 |
| Entry Address: |
0x000e8676 |
| Name |
Size of data |
MD5 |
| .text |
950272 |
c606870646c351ec2ffa38211645a880 |
| .rdata |
214528 |
c0f2d0561f935347ea4468e7f9fc5207 |
| .data |
8704 |
a70790a110b5dff1ae32b34bb99be1c7 |
| .gfids |
512 |
53fb7e095bc21c6e325048889bd82454 |
| .rsrc |
1024 |
f3cf6f5db41da2957aaf3263cb7ccac3 |
| .reloc |
31744 |
320bd11c5b8ced7f6527a7f86d3f6e1c |
