How to remove $R7JFIIP.dll

$R7JFIIP.dll

The module $R7JFIIP.dll has been detected as Risk.RemoteAdmin

$R7JFIIP.dll
Remove $R7JFIIP.dll

File Details

Product Name:

Remote Manipulator System
Company Name:

TektonIT
MD5: 56c10161ff350d143fe51affe777d19f
Size: 966 KB
First Published: 2017-07-22 04:06:08 (6 years ago)
Latest Published: 2019-09-15 23:16:39 (4 years ago)
Status: Risk.RemoteAdmin (on last analysis)
Analysis Date: 2019-09-15 23:16:39 (4 years ago)

Overview

Signed By: Ter-Osipov Aleksey Vladimirovich
Status: Valid

Common Places:

%programfiles%\remote manipulator system - host
%desktop%\agent
%appdata%\rms-agent\68001\39a0515df8
%appdata%\rms-agent\68001\abc09f8c72
%desktop%\новая папка\rms.host.6.8.ru\data1
%appdata%\rms-agent\68001
%profile%\downloads\agent
%programfiles%
%sysdrive%\проги\rms
%desktop%

File Names:

RWLN.dll
$R7JFIIP.dll
rwln.dll

Geography:

60.0%
25.0%
5.0%
5.0%
2.5%
2.5%

OS Version:

Windows 10 55.0%
Windows 7 40.0%
Windows Server 2008 R2 2.5%
Windows 8.1 2.5%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000d37d8

PE Sections:

Name Size of data MD5
.text 858624 c993872850f58952c63619b51abdef41
.itext 2560 a5eb962d62eb76fe04c3d46d064afa05
.data 15360 f47b64c4c9f7cdcad4000423cf88b886
.bss 0 00000000000000000000000000000000
.idata 4608 fda801c0b053318bf8786ba0bb4efea2
.didata 1024 0c460f16136db7eac6ce41fb617c8539
.edata 512 f2cf61d933d60440ccae83e1feb321f8
.rdata 512 27666cc3e23727433a157dc83a9d907f
.reloc 84992 0f8d17c9e226ba8bacb35077f53c08a5
.rsrc 12288 236515be93fe8cd8bbf409f751f59452

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for $R7JFIIP.dll
copyright for information about $R7JFIIP.dll