How to remove $R243QOM.exe

$R243QOM.exe

The module $R243QOM.exe has been detected as Adware.Downloader

$R243QOM.exe
Remove $R243QOM.exe

File Details

Product Name:

Hanso Recorder
Company Name:

HansoTools LLC
MD5: 84dd1d6453b5dd8224d52181753145bc
Size: 5 MB
First Published: 2018-11-08 21:03:37 (5 years ago)
Latest Published: 2018-11-08 21:03:37 (5 years ago)
Status: Adware.Downloader (on last analysis)
Analysis Date: 2018-11-08 21:03:37 (5 years ago)

Overview

Signed By: Prospera Software, Inc.
Status: Valid

Common Places:

%sysdrive%\$recycle.bin

Geography:

100.0%

OS Version:

Windows 7 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000038af

PE Sections:

Name Size of data MD5
.text 29696 419d4e1be1ac35a5db9c47f553b27cea
.rdata 11264 cca1ca3fbf99570f6de9b43ce767f368
.data 512 77f0839f8ebea31040e462523e1c770e
.ndata 0 00000000000000000000000000000000
.rsrc 104960 c75fc5f4fc4909482545516fc7205ec4
.reloc 4096 7957adbe28a7f90496a42dc8ec55f0d0

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for $R243QOM.exe
copyright for information about $R243QOM.exe