How to remove $RTV9A36.exe

$RTV9A36.exe

The module $RTV9A36.exe has been detected as Adware.InstallCore

$RTV9A36.exe
Remove $RTV9A36.exe

File Details

Product Name:

Gomo

Company Name:

MD5: ad18dd12592eca94de1aedd953ee7d8f
Size: 1 MB
First Published: 2018-07-08 08:06:38 (6 years ago)
Latest Published: 2018-08-28 12:06:53 (6 years ago)
Status: Adware.InstallCore (on last analysis)
Analysis Date: 2018-08-28 12:06:53 (6 years ago)

Overview

Signed By: LAM Proactive And Investments Ltd
Status: Valid

Common Places:

%profile%
%sysdrive%\$recycle.bin
%sysdrive%

File Names:

ultrasurf_4290243574(1).exe
$RTV9A36.exe
$RI5GQ0P.exe
tomtom-home_0956015359.exe
winpcap_0755399210.exe
xiaopan_os_0765835532.exe

Geography:

90.9%
4.5%
4.5%

OS Version:

Windows 10 95.5%
Windows 8.1 4.5%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0000a5f8

PE Sections:

Name Size of data MD5
CODE 40448 0a096f65154fa8478cdc31b26ec1c330
DATA 1024 1ee71d84f1c77af85f1f5c278f880572
BSS 0 00000000000000000000000000000000
.idata 2560 bb5485bf968b970e5ea81292af2acdba
.tls 0 00000000000000000000000000000000
.rdata 512 9ba824905bf9c7922b6fc87a38b74366
.reloc 0 00000000000000000000000000000000
.rsrc 11264 d127d73e449f98faa84ac1a7154830c2

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for $RTV9A36.exe
copyright for information about $RTV9A36.exe