How to remove $RN67794.dll

$RN67794.dll

The module $RN67794.dll has been detected as Adware.ELEX

$RN67794.dll
Remove $RN67794.dll

File Details

Product Name:

Firefox
Company Name:

Mozilla Foundation
MD5: aa8e6a30676d65d7840a0f84368226e2
Size: 1 MB
First Published: 2017-05-24 11:10:32 (6 years ago)
Latest Published: 2019-04-01 19:50:25 (5 years ago)
Status: Adware.ELEX (on last analysis)
Analysis Date: 2019-04-01 19:50:25 (5 years ago)

Overview

Signed By: Mengmeng Wang
Status: Valid

Common Places:

%programfiles%\firefox
%sysdrive%\adwcleaner\quarantine\files\rszejbxwtcmauudlsqitlujsdrmndwbk
%sysdrive%\$recycle.bin\s-1-5-21-1515912927-174380303-3839714098-1001\$ray0gxo
%sysdrive%\$recycle.bin\s-1-5-21-3737494481-1270847105-2955528620-1000
%sysdrive%\adwcleaner\quarantine\files\tpcysuvkwihevhehjjthgqodwqcmcura
%sysdrive%\adwcleaner\quarantine\files\pdtyxugckxueyuxrhshgxdjblezsdqrw
%sysdrive%\adwcleaner\quarantine\files\mjxftjlavkjfpqywfokrhiyzuuxwsoxt
%sysdrive%\quarantine_mzk\folders\201705258450847\firefox. 9.15.57.25
%programfiles%
%appdata%\zhp\quarantine\zhpcleaner

File Names:

mozavcodec.dll
$RN67794.dll

Geography:

28.6%
11.7%
10.4%
8.4%
7.8%
6.5%
5.8%
2.6%
1.9%
1.9%
1.3%
1.3%
1.3%
1.3%
1.3%
1.3%
1.3%
1.3%
0.6%
0.6%
0.6%
0.6%
0.6%
0.6%

OS Version:

Windows 7 49.0%
Windows 10 38.1%
Windows 8.1 9.7%
Windows 8 2.6%
Windows Server 2012 R2 0.6%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x10000000
Entry Address: 0x00146c40

PE Sections:

Name Size of data MD5
.text 1336832 4110058f30328c7320e71c4cdec9f0a8
.rdata 87552 fd858d7ec931f6b95d1e066b2043ace8
.data 1024 8bfbf834b1d215df3bb6c38cf704379c
.rodata 24576 84a7dbbb958b974b0bb28e778778410f
.gfids 512 a92cc8ed8c85d36fee9303020b9c9396
.rsrc 1024 1d4194bc4d63271f9875a1db3447fe26
.reloc 44032 540e456fa233aeb8198cfd43c0a95248

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for $RN67794.dll
copyright for information about $RN67794.dll