How to remove $R7S94KM.exe

$R7S94KM.exe

The module $R7S94KM.exe has been detected as Trojan.Agent

$R7S94KM.exe
Remove $R7S94KM.exe

File Details

Product Name:

TabTest 应用程序
MD5: 65b1847adf8581e54fdd18b28761427f
Size: 386 KB
First Published: 2018-08-21 09:08:04 (6 years ago)
Latest Published: 2018-09-24 14:10:23 (6 years ago)
Status: Trojan.Agent (on last analysis)
Analysis Date: 2018-09-24 14:10:23 (6 years ago)

Overview

Signed By: Qihoo 360 Software (Beijing) Company Limited
Status: Invalid (digital signature could be stolen or file could be patched)

Common Places:

%commonappdata%
%sysdrive%\$recycle.bin

File Names:

regea.exe
$R7S94KM.exe

Geography:

50.0%
50.0%

OS Version:

Windows Server 2012 50.0%
Windows Server 2012 R2 50.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000042fe

PE Sections:

Name Size of data MD5
.text 16384 0e048d9e1046a88fec6033d316ddf24a
.rdata 8192 0297d8d3a5968cf3df1394d65a36ee01
.data 344064 a11f9f6cdd0ae206759f73248aea7eed
.rsrc 16384 371b060d2c4ff43d55e7daf2949795b4

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for $R7S94KM.exe
copyright for information about $R7S94KM.exe