How to remove $RZNZT8W.exe

$RZNZT8W.exe

The module $RZNZT8W.exe has been detected as Adware.ELEX

$RZNZT8W.exe
Remove $RZNZT8W.exe

File Details

Product Name:

Firefox
Company Name:

Mozilla Corporation
MD5: a2eb72a0a181c0c6899c384d13777e55
Size: 28 KB
First Published: 2017-05-24 11:10:30 (7 years ago)
Latest Published: 2019-10-12 19:26:39 (4 years ago)
Status: Adware.ELEX (on last analysis)
Analysis Date: 2019-10-12 19:26:39 (4 years ago)

Overview

Signed By: Mengmeng Wang
Status: Valid

Common Places:

%programfiles%\firefox
%sysdrive%\adwcleaner\quarantine\files\rszejbxwtcmauudlsqitlujsdrmndwbk
%sysdrive%\$recycle.bin\s-1-5-21-1515912927-174380303-3839714098-1001\$ray0gxo
%sysdrive%\$recycle.bin\s-1-5-21-3737494481-1270847105-2955528620-1000
%programfiles%\59268ba6_jumpeasy\sdirec
%programfiles%\592555f9_jumpeasy\sdirec
%sysdrive%\adwcleaner\quarantine\files\tpcysuvkwihevhehjjthgqodwqcmcura
%sysdrive%\adwcleaner\quarantine\files\pdtyxugckxueyuxrhshgxdjblezsdqrw
%sysdrive%\adwcleaner\quarantine\files\mjxftjlavkjfpqywfokrhiyzuuxwsoxt
%sysdrive%\quarantine_mzk\folders\201705258450847\firefox. 9.15.57.25

File Names:

plugin-hang-ui.exe
$RZNZT8W.exe

Geography:

28.9%
12.5%
11.2%
8.6%
7.2%
5.9%
3.9%
2.6%
2.0%
2.0%
2.0%
2.0%
1.3%
1.3%
1.3%
1.3%
1.3%
0.7%
0.7%
0.7%
0.7%
0.7%
0.7%
0.7%

OS Version:

Windows 7 46.4%
Windows 10 40.5%
Windows 8.1 9.8%
Windows 8 2.6%
Windows Server 2012 R2 0.7%

Analysis

Subsystem: Windows CUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00002dbe

PE Sections:

Name Size of data MD5
.text 10752 7dbffc97d5a4526661c43b063e68dc3d
.rdata 6656 aeacd3851a18e1e188b7731947183e2c
.data 512 73d141e0b4af01c6667bae2820e186ac
.gfids 512 aaaff7fbc60b15d361941294f7f18fd9
.rsrc 3072 956bdc5df6439664c43cd50c7a186fd0
.reloc 1024 3d997e8fa6b61ebcc22eb38b000071a1

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for $RZNZT8W.exe
copyright for information about $RZNZT8W.exe