How to remove $RP4HEGO.exe

$RP4HEGO.exe

The module $RP4HEGO.exe has been detected as General Threat

$RP4HEGO.exe
Remove $RP4HEGO.exe

File Details

Product Name:

Auslogics Disk Defrag Professional, Portable Edition
Company Name:

jooseng.blog.163.com
MD5: 4b512d40e9aed380139ccd41fd90f0fb
Size: 482 KB
First Published: 2017-06-24 21:04:43 (6 years ago)
Latest Published: 2019-11-21 17:55:43 (4 years ago)
Status: General Threat (on last analysis)
Analysis Date: 2019-11-21 17:55:43 (4 years ago)

Common Places:

%desktop%
%sysdrive%\portable
%sysdrive%\program\auslogics disk defrag professional 4.9.1
%sysdrive%\my portable programs
%sysdrive%\programas varios\auslogic disc defrag 4.8.1
%sysdrive%\software\auslogics.disk.defrag.pro.v4.9.1.0\auslogics.disk.defrag.pro.v4.9.1.0
%sysdrive%\$recycle.bin
%sysdrive%\_m y s o f t\portable soft
%profile%\downloads\@standalone
%sysdrive%\portable soft

File Names:

DiskDefragProfessionalPortable.exe
$RP4HEGO.exe
diskdefragproportable.exe

Geography:

36.1%
11.1%
11.1%
8.3%
5.6%
2.8%
2.8%
2.8%
2.8%
2.8%
2.8%
2.8%
2.8%
2.8%
2.8%

OS Version:

Windows 10 52.8%
Windows 7 36.1%
Windows 8.1 11.1%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000039e3

PE Sections:

Name Size of data MD5
.text 28672 f569e353af0ed51bf4c216faa9bed4e7
.rdata 11264 91eee43954e068e650f7b73a8b0e6915
.data 512 db9f7acbf1c3ddfe255077b699955dfa
.ndata 0 00000000000000000000000000000000
.rsrc 367104 323a5ee580ac0f550a10c21c3f92da26
.reloc 4096 b9504da59a2e14a3b72c13fe23a34fe9

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for $RP4HEGO.exe
copyright for information about $RP4HEGO.exe