How to remove $R4QUDBP.crdownload

» File
File Details
Overview
Analysis

$R4QUDBP.crdownload

The module $R4QUDBP.crdownload has been detected as Adware.InstallCore

$R4QUDBP.crdownload

Remove $R4QUDBP.crdownload

File Details

Main Info:

Product Name:	Dep
Company Name:	Fapuf
MD5:	1296952499ce2fa99a6ebcd84d5dc0d0
Size:	2 MB
First Published:	2020-01-19 04:35:14 (4 years ago)
Latest Published:	2020-01-19 04:35:14 (4 years ago)

Analysis:

Status:	Adware.InstallCore (on last analysis)
Analysis Date:	2020-01-19 04:35:14 (4 years ago)

Overview

Digital Signature

Signed By:	LUCEATECH LTD
Status:	Valid

Common Places:

%sysdrive%\$recycle.bin

Geography:

100.0%

OS Version:

Windows 7

100.0%

Analysis

PE Info:

Subsystem:	Windows GUI
PE Type:	pe
OS Bitness:	32
Image Base:	0x00400000
Entry Address:	0x00016478

PE Sections:

Name	Size of data	MD5
.text	82944	06ccf471fa19931266d34f9cf55eb35f
.itext	3072	7fc7d05c28e6f40a31479e9c8d1b2802
.data	3584	d5b22eff9e08edaa95f493c1a71158c0
.bss	0	00000000000000000000000000000000
.idata	4096	b47eaca4c149ee829de76a342b5560d5
.tls	0	00000000000000000000000000000000
.rdata	512	3746f5876803f8f30db5bb2deb8772ae
.rsrc	45568	10a06a062d7a7169ac9a494cc4a4ab21

More information:

Search on Virustotal

Download GridinSoft Anti-Malware - Removal tool for $R4QUDBP.crdownload

copyright for information about $R4QUDBP.crdownload