How to remove $R2XT4Z4.exe
- File Details
- Overview
- Analysis
$R2XT4Z4.exe
The module $R2XT4Z4.exe has been detected as Trojan.Patched
File Details
Product Name: |
|
Company Name: |
|
MD5: |
82333d72970ef9b781bb5a4416619f63 |
Size: |
154 KB |
First Published: |
2017-09-15 20:09:23 (7 years ago) |
Latest Published: |
2020-11-04 00:54:21 (4 years ago) |
Status: |
Trojan.Patched (on last analysis) |
|
Analysis Date: |
2020-11-04 00:54:21 (4 years ago) |
%profile%\downloads\l.troj.remover.2.0.42.126\l.troj.remover.2.0.42.126\loaris remover 2.0.42 portable\loaris remover 2.0.42 portable |
%sysdrive%\portableaps\portableapps\loaris remover 2.0.44 portable |
%desktop%\l.troj.remover.2.0.42.126\l.troj.remover.2.0.42.126\loaris remover 2.0.42 portable\loaris remover 2.0.42 portable |
%desktop%\loaris trojan removerportable |
%profile%\downloads\loarisremover2.0.29\loaris remover 2.0.29 portable |
%sysdrive%\$recycle.bin\s-1-5-21-4242192368-2860933304-3997710596-1000\$rdo7cs7 |
%sysdrive%\a\wincare\loaris trojan remover 2.0.44 portable |
%desktop%\loarisremover2.0.29\loaris remover 2.0.29 portable |
%sysdrive% |
%sysdrive%\bobi71\loaris trojan remover 2.0.44 repack @amp; portable by 9649 |
LoarisTrojanRemoverPortable.exe |
$R2XT4Z4.exe |
LoarisTrojanRemoverPortable_1.exe |
|
28.8% |
|
|
14.4% |
|
|
6.8% |
|
|
6.8% |
|
|
5.3% |
|
|
3.8% |
|
|
3.8% |
|
|
3.0% |
|
|
3.0% |
|
|
2.3% |
|
|
2.3% |
|
|
2.3% |
|
|
1.5% |
|
|
1.5% |
|
|
1.5% |
|
|
1.5% |
|
|
1.5% |
|
|
1.5% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
Windows 7 |
66.7% |
|
Windows 10 |
28.8% |
|
Windows 8.1 |
2.3% |
|
Windows XP |
1.5% |
|
Windows Embedded 8.1 |
0.8% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x000039e3 |
Name |
Size of data |
MD5 |
.text |
28672 |
f569e353af0ed51bf4c216faa9bed4e7 |
.rdata |
11264 |
91eee43954e068e650f7b73a8b0e6915 |
.data |
512 |
db9f7acbf1c3ddfe255077b699955dfa |
.ndata |
0 |
00000000000000000000000000000000 |
.rsrc |
16384 |
89ff5fb3426ab5cbec516b18696386dc |
.reloc |
4096 |
380e44de64bf312e9eef321150a495a7 |