How to remove $RMHEXYK.exe

$RMHEXYK.exe

The module $RMHEXYK.exe has been detected as Adware.ELEX

$RMHEXYK.exe
Remove $RMHEXYK.exe

File Details

Product Name:

Firefox
Company Name:

Mozilla Foundation
MD5: 9a4abaa0d016324f78f62b9996683410
Size: 310 KB
First Published: 2017-05-21 04:03:33 (7 years ago)
Latest Published: 2019-04-10 02:33:34 (5 years ago)
Status: Adware.ELEX (on last analysis)
Analysis Date: 2019-04-10 02:33:34 (5 years ago)

Overview

Signed By: Mengmeng Wang
Status: Valid

Common Places:

%programfiles%\firefox
%sysdrive%\adwcleaner\quarantine\files\elpsmjvvmbctzuzgymreqtfnlrfefdyb
%profile%\dropbox\farina\backup c\adwcleaner\quarantine\files\elpsmjvvmbctzuzgymreqtfnlrfefdyb
%sysdrive%\$recycle.bin\s-1-5-21-1992274373-2149420621-907573384-1000
%sysdrive%\adwcleaner\quarantine\files\qivticfbhplowovmvofwbvcmqdkrzqie
%sysdrive%\adwcleaner\quarantine\files\brtzueofziatokksflqoyuuhpwqqkxer
%sysdrive%\adwcleaner\quarantine\files\ukyiiewribfnwsfajtujlibnuipogenb
%programfiles%\5901eb50_jumpeasy\sdirec
%programfiles%
%programfiles%\5901c7ea_jumpeasy

File Names:

updater.exe
$RMHEXYK.exe

Geography:

18.5%
14.8%
11.1%
11.1%
11.1%
11.1%
7.4%
3.7%
3.7%
3.7%
3.7%

OS Version:

Windows 7 48.1%
Windows 10 37.0%
Windows XP 11.1%
Windows 8 3.7%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0000b667

PE Sections:

Name Size of data MD5
.text 154112 a3e089bc634b44a127d3345bdf2b1669
.rdata 44544 dc24cf9c6f66c442fba47adee9fde042
.data 6144 9898b39ed1ce10a2ef4b958849496c6d
.gfids 512 7bdd052e1610bea1cc09ce2faa33ead1
.rsrc 97792 1a5fe8f7de6c1e80e4b0d550d65203b3
.reloc 7680 bfebaff7908179bcf65360325d56764c

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for $RMHEXYK.exe
copyright for information about $RMHEXYK.exe