How to remove $RF83ITU.dll
- File Details
- Overview
- Analysis
$RF83ITU.dll
The module $RF83ITU.dll has been detected as Adware.Agent
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
d7d03872c366a97e0ba8135457f35d45 |
| Size: |
368 KB |
| First Published: |
2017-08-15 03:10:12 (7 years ago) |
| Latest Published: |
2024-04-05 23:05:46 (a year ago) |
| Status: |
Adware.Agent (on last analysis) |
|
| Analysis Date: |
2024-04-05 23:05:46 (a year ago) |
Overview
| %programfiles%\driverrestore |
| %desktop%\nkt 2017\nhà b tgð\driverrestore |
| %programfiles% |
| %sysdrive%\adwcleaner\quarantine |
| %desktop%\documentos\webcam |
| %sysdrive%\$recycle.bin |
| %desktop%\backup\document\drivers |
| %programfiles% |
| %programfiles% |
| %programfiles% |
| Newtonsoft.Json.dll |
| $RF83ITU.dll |
|
31.8% |
|
|
15.9% |
|
|
13.6% |
|
|
6.8% |
|
|
4.5% |
|
|
4.5% |
|
|
4.5% |
|
|
2.3% |
|
|
2.3% |
|
|
2.3% |
|
|
2.3% |
|
|
2.3% |
|
|
2.3% |
|
|
2.3% |
|
|
2.3% |
|
| Windows 10 |
65.9% |
|
| Windows 7 |
15.9% |
|
| Windows 8.1 |
13.6% |
|
| Windows 8 |
4.5% |
|
Analysis
| Subsystem: |
Windows CUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0005ba5e |
| MVID: |
0d63f65d-290d-4c32-bde3-f67e301f7dda |
| Typelib ID: |
9ca358aa-317b-4925-8ada-4a29e943a363 |
| Name |
Size of data |
MD5 |
| .text |
367616 |
eb637255ea20794fac797edb80cec3ea |
| .rsrc |
1536 |
5038b8d5c3291b3deb4ab08543055f75 |
| .reloc |
512 |
777a08fd3cbefcbbeeedcddb08e2ae47 |
