How to remove $RHKYG0L.exe

$RHKYG0L.exe

The module $RHKYG0L.exe has been detected as PUP.Uniblue

$RHKYG0L.exe
Remove $RHKYG0L.exe

File Details

Product Name:

DriverScanner

Company Name:

Uniblue Systems Ltd

MD5: 3fa06b31fb2d35802aa542eefa5f5e22
Size: 7 MB
First Published: 2017-07-26 12:32:16 (7 years ago)
Latest Published: 2020-06-12 22:17:19 (4 years ago)
Status: PUP.Uniblue (on last analysis)
Analysis Date: 2020-06-12 22:17:19 (4 years ago)

Overview

Signed By: Uniblue Systems
Status: Invalid (digital signature could be stolen or file could be patched)

Common Places:

%temp%\rar$exa0.627
%sysdrive%\windows.old\users\vitaly\downloads\driverscanner2016_key.zip\driverscanner2016_key
%profile%\downloads\driverscanner + key.rar
%sysdrive%\$recycle.bin\s-1-5-21-683061589-2006614224-1086949521-1001
%sysdrive%\barokaram
%sysdrive%\software library\uniblue driverscanner 2016 + key...(works...ok!)
%sysdrive%\software library\uniblue driverscanner 2016 + key...(works...ok!)\uniblue driverscanner 2016 + key.zip
%sysdrive%
%sysdrive%\progamas
%profile%\downloads

File Names:

driverscanner.exe
$RHKYG0L.exe
Uniblue.DriverScanner.4.0.16.0 [UbiRock.iR].exe
A0025442.exe

Geography:

14.3%
10.7%
10.7%
7.1%
7.1%
7.1%
7.1%
7.1%
3.6%
3.6%
3.6%
3.6%
3.6%
3.6%
3.6%
3.6%

OS Version:

Windows 10 60.7%
Windows 7 32.1%
Windows 8.1 7.1%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000113bc

PE Sections:

Name Size of data MD5
.text 61952 3a126e478661f20816f9d9285615f98e
.itext 3072 ba48b9b17b3dd8b92da3bd93f20ddb34
.data 3584 d7fd5f4b562d7961758f3d6a8c834fd0
.bss 0 00000000000000000000000000000000
.idata 3584 93d91a2b90e60bd758fc0c4908856ae1
.tls 0 00000000000000000000000000000000
.rdata 512 3dffc444ccc131c9dcee18db49ee6403
.rsrc 96768 8c930aa8abe9de175299527311925a32

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for $RHKYG0L.exe
copyright for information about $RHKYG0L.exe