How to remove 1TonerRecoverSetup[1].exe

1TonerRecoverSetup[1].exe

The module 1TonerRecoverSetup[1].exe has been detected as Ransom.Wacatac

1TonerRecoverSetup[1].exe
Company Name:

EverestSoftrade

MD5: 411750c74a68d6b3410f45bc19beec7f
Size: 464 KB
First Published: 2021-07-20 20:16:47 (4 years ago)
Latest Published: 2021-07-20 20:43:31 (4 years ago)
Status: Ransom.Wacatac (on last analysis)
Analysis Date: 2021-07-20 20:43:31 (4 years ago)
%localappdata%\microsoft\windows\inetcache\ie
%localappdata%\microsoft\windows\inetcache\ie
Mexico 50.0%
Indonesia 50.0%
Windows 10 100.0%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00025468

PE Sections:

Name Size of data MD5
CODE 148992 5e14e4ede2e2215bc7d72837b9871f8f
DATA 10752 abafcbfbd7f8ac0226ca496a92a0cf06
BSS 0 d41d8cd98f00b204e9800998ecf8427e
.idata 6144 a4e0ac39d5ed487ceea059fa23dfce5e
.tls 0 d41d8cd98f00b204e9800998ecf8427e
.rdata 512 c4fdd0c5c9efb616fcc85d66056ca490
.reloc 6656 867a1120317d51734587a74f6ee70016
.rsrc 7680 17f5087e879deb057dcbdad87cf5545e

More information:

Download GridinSoft Anti-Malware - Removal tool for 1TonerRecoverSetup[1].exe
­