How to remove A0197642.dll

A0197642.dll

The module A0197642.dll has been detected as Adware.Funshion

A0197642.dll
Remove A0197642.dll

File Details

Product Name:

Railway
Company Name:

北京风行在线技术有限公司
MD5: 3ee6a7ba761c3a16a83a97c8af6ad81e
Size: 661 KB
First Published: 2017-11-28 14:06:33 (6 years ago)
Latest Published: 2018-02-12 17:11:31 (6 years ago)
Status: Adware.Funshion (on last analysis)
Analysis Date: 2018-02-12 17:11:31 (6 years ago)

Overview

Signed By: Beijing Funshion Online Technologies Ltd.
Status: Valid

Common Places:

%appdata%\aconsider
%appdata%\aaodemm
%appdata%\achurch
%appdata%\aswiftly
%appdata%\ahoweverd
%appdata%\afigure
%appdata%\asubtle
%sysdrive%\system volume information\_restore{ab745cfb-68f6-40e9-b0db-3eb1865a6002}

File Names:

Railway.dll
A0197642.dll

Geography:

100.0%

OS Version:

Windows 10 87.5%
Windows XP 12.5%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x10000000
Entry Address: 0x000599a7

PE Sections:

Name Size of data MD5
.text 521728 e9f909f52a50e68da2c18d90dc5f241c
.rdata 93184 2c2dc50b38aa283dfd2734e052b0c036
.data 13824 6e1a51321f36e55367f0be5f8f9624ff
.rsrc 1536 38cdd29602e0462a4dae602f8572e720
.reloc 39936 064bf6f25ac49c018cbf975b9e75e0a8

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for A0197642.dll
copyright for information about A0197642.dll