How to remove $R3GTLDZ.exe

$R3GTLDZ.exe

The module $R3GTLDZ.exe has been detected as Adware.InstallCore

$R3GTLDZ.exe
Remove $R3GTLDZ.exe

File Details

Product Name:

Pes

Company Name:

MD5: 292514c3555fd5d3239904ef49939c58
Size: 1 MB
First Published: 2018-01-23 16:07:11 (6 years ago)
Latest Published: 2018-01-23 16:07:20 (6 years ago)
Status: Adware.InstallCore (on last analysis)
Analysis Date: 2018-01-23 16:07:20 (6 years ago)

Overview

Signed By: New Software S.C. Marek Lubas Mateusz Ponikowski
Status: Valid

Common Places:

%sysdrive%\$recycle.bin

File Names:

$R5T3UCT.exe
$R3GTLDZ.exe

Geography:

100.0%

OS Version:

Windows 7 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0000a5f8

PE Sections:

Name Size of data MD5
CODE 40448 7370258026c4c1c67dee1e0dd41aa738
DATA 1024 beee52f18301950f82460d9ffe5aec7e
BSS 0 00000000000000000000000000000000
.idata 2560 bb5485bf968b970e5ea81292af2acdba
.tls 0 00000000000000000000000000000000
.rdata 512 9ba824905bf9c7922b6fc87a38b74366
.reloc 0 00000000000000000000000000000000
.rsrc 38912 3a0fa7849effa4e09dc11665a25d4623

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for $R3GTLDZ.exe
copyright for information about $R3GTLDZ.exe