How to remove $ROO9NNQ.exe

$ROO9NNQ.exe

The module $ROO9NNQ.exe has been detected as Adware.InstallCore

$ROO9NNQ.exe
Remove $ROO9NNQ.exe

File Details

Product Name:

Higo

Company Name:

Kucelotuso

MD5: f1de1d9693b82057103c71b5a14a2a7b
Size: 1 MB
First Published: 2018-03-14 04:11:07 (6 years ago)
Latest Published: 2018-03-14 04:11:07 (6 years ago)
Status: Adware.InstallCore (on last analysis)
Analysis Date: 2018-03-14 04:11:07 (6 years ago)

Overview

Signed By: Innova Media d.o.o.
Status: Valid

Common Places:

%sysdrive%\$recycle.bin

Geography:

100.0%

OS Version:

Windows 7 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0000aa98

PE Sections:

Name Size of data MD5
CODE 41472 c8bf63989da5af934ae8942810ef23e2
DATA 1024 9b2268ed5360951559d8041925d025fb
BSS 0 00000000000000000000000000000000
.idata 2560 df5f31e62e05c787fd29eed7071bf556
.tls 0 00000000000000000000000000000000
.rdata 512 14dfa4128117e7f94fe2f8d7dea374a0
.reloc 0 00000000000000000000000000000000
.rsrc 11264 f42da363019f9d1a25a82b8a3bab2caf

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for $ROO9NNQ.exe
copyright for information about $ROO9NNQ.exe