How to remove $R6RH4IW.dll

$R6RH4IW.dll

The module $R6RH4IW.dll has been detected as Adware.ELEX

$R6RH4IW.dll
Remove $R6RH4IW.dll

File Details

Product Name:

Firefox
Company Name:

Mozilla Foundation
MD5: f672226ff6fdaeacf9bd2e1757430e7b
Size: 64 KB
First Published: 2017-05-21 04:03:33 (7 years ago)
Latest Published: 2019-04-10 02:34:50 (5 years ago)
Status: Adware.ELEX (on last analysis)
Analysis Date: 2019-04-10 02:34:50 (5 years ago)

Overview

Signed By: Mengmeng Wang
Status: Valid

Common Places:

%programfiles%\firefox
%sysdrive%\adwcleaner\quarantine\files\elpsmjvvmbctzuzgymreqtfnlrfefdyb
%profile%\dropbox\farina\backup c\adwcleaner\quarantine\files\elpsmjvvmbctzuzgymreqtfnlrfefdyb
%sysdrive%\$recycle.bin\s-1-5-21-1992274373-2149420621-907573384-1000
%sysdrive%\adwcleaner\quarantine\files\qivticfbhplowovmvofwbvcmqdkrzqie
%sysdrive%\adwcleaner\quarantine\files\brtzueofziatokksflqoyuuhpwqqkxer
%sysdrive%\adwcleaner\quarantine\files\ukyiiewribfnwsfajtujlibnuipogenb
%programfiles%\5901eb50_jumpeasy\sdirec
%programfiles%
%programfiles%\5901c7ea_jumpeasy

File Names:

IA2Marshal.dll
$R6RH4IW.dll

Geography:

17.9%
14.3%
14.3%
10.7%
10.7%
10.7%
7.1%
3.6%
3.6%
3.6%
3.6%

OS Version:

Windows 7 46.4%
Windows 10 39.3%
Windows XP 10.7%
Windows 8 3.6%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x10000000
Entry Address: 0x000014bc

PE Sections:

Name Size of data MD5
.text 4096 f30f7b66f159e4de9130888a0363b3ee
.orpc 1024 f17262e057f993d4392590d5dabcaa76
.rdata 20992 96c01674e1cd1c5920da2102dbce9c8f
.data 2560 e57711f103fba1c38ee7ae02b2ee7245
.gfids 512 a92cc8ed8c85d36fee9303020b9c9396
.rsrc 30208 bb63787ac22d77d7696fafa65c45a187
.reloc 2560 d9ee3bdb9effc3f6d8e32612fedd050b

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for $R6RH4IW.dll
copyright for information about $R6RH4IW.dll