How to remove $RMFIBA5.dll
- File Details
- Overview
- Analysis
$RMFIBA5.dll
The module $RMFIBA5.dll has been detected as Adware.ELEX
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
720c2428af6959eabcc4b663a3d3387c |
| Size: |
152 KB |
| First Published: |
2017-05-24 11:10:32 (7 years ago) |
| Latest Published: |
2019-04-01 19:57:26 (5 years ago) |
| Status: |
Adware.ELEX (on last analysis) |
|
| Analysis Date: |
2019-04-01 19:57:26 (5 years ago) |
Overview
| %programfiles%\firefox |
| %sysdrive%\adwcleaner\quarantine\files\rszejbxwtcmauudlsqitlujsdrmndwbk |
| %sysdrive%\$recycle.bin\s-1-5-21-1515912927-174380303-3839714098-1001\$ray0gxo |
| %sysdrive%\$recycle.bin\s-1-5-21-3737494481-1270847105-2955528620-1000 |
| %sysdrive%\adwcleaner\quarantine\files\tpcysuvkwihevhehjjthgqodwqcmcura |
| %sysdrive%\adwcleaner\quarantine\files\pdtyxugckxueyuxrhshgxdjblezsdqrw |
| %sysdrive%\adwcleaner\quarantine\files\mjxftjlavkjfpqywfokrhiyzuuxwsoxt |
| %sysdrive%\quarantine_mzk\folders\201705258450847\firefox. 9.15.57.25 |
| %programfiles% |
| %appdata%\zhp\quarantine\zhpcleaner |
| mozavutil.dll |
| $RMFIBA5.dll |
|
28.6% |
|
|
11.7% |
|
|
10.4% |
|
|
8.4% |
|
|
7.8% |
|
|
6.5% |
|
|
5.8% |
|
|
2.6% |
|
|
1.9% |
|
|
1.9% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
| Windows 7 |
49.0% |
|
| Windows 10 |
38.1% |
|
| Windows 8.1 |
9.7% |
|
| Windows 8 |
2.6% |
|
| Windows Server 2012 R2 |
0.6% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x10000000 |
| Entry Address: |
0x0000e1bd |
| Name |
Size of data |
MD5 |
| .text |
56320 |
ab12cc040ccda70f3207d4aafd58574e |
| .rdata |
87040 |
1d092cf1a6ada42e1a3a1382df10754f |
| .data |
512 |
22a687484e888bfba0b44f86c65542b4 |
| .gfids |
512 |
a92cc8ed8c85d36fee9303020b9c9396 |
| .rsrc |
1024 |
baa582d955cdc507d77f33ab7c199c8e |
| .reloc |
4096 |
8efb3783071b40b752a86a17b4ca07c9 |
