How to remove $RW125OQ.exe

» File
File Details
Overview
Analysis

$RW125OQ.exe

The module $RW125OQ.exe has been detected as PUP.SystemOptimizer

$RW125OQ.exe

Remove $RW125OQ.exe

File Details

Main Info:

Product Name:	DLL Suite
Company Name:
MD5:	394d39b1058e3a929400f5623d3625d3
Size:	20 MB
First Published:	2018-07-25 13:14:45 (6 years ago)
Latest Published:	2018-07-25 13:14:45 (6 years ago)

Analysis:

Status:	PUP.SystemOptimizer (on last analysis)
Analysis Date:	2018-07-25 13:14:45 (6 years ago)

Overview

Digital Signature

Signed By:	Beijing VSK Soft Development Co.,Ltd
Status:	Invalid (digital signature could be stolen or file could be patched)

Common Places:

%sysdrive%\windows.old\$recycle.bin

Geography:

100.0%

OS Version:

Windows 7

100.0%

Analysis

PE Info:

Subsystem:	Windows GUI
PE Type:	pe
OS Bitness:	32
Image Base:	0x00400000
Entry Address:	0x00016478

PE Sections:

Name	Size of data	MD5
.text	82944	345db2b6911addc85b53f32245f969a0
.itext	3072	2e74d968caedeb2d71b9505530d43907
.data	3584	d5b22eff9e08edaa95f493c1a71158c0
.bss	0	00000000000000000000000000000000
.idata	4096	b47eaca4c149ee829de76a342b5560d5
.tls	0	00000000000000000000000000000000
.rdata	512	3746f5876803f8f30db5bb2deb8772ae
.rsrc	406016	1b02c7bf93c62f51ed9a3e2828f25b02

More information:

Search on Virustotal

Download GridinSoft Anti-Malware - Removal tool for $RW125OQ.exe

copyright for information about $RW125OQ.exe