How to remove BellesBeautyBoutique.exe

BellesBeautyBoutique.exe

The module BellesBeautyBoutique.exe has been detected as Worm.Ramnit

BellesBeautyBoutique.exe
Remove BellesBeautyBoutique

File Details

Product Name:

Belle's Beauty Boutique
Company Name:

Demand Media
MD5: 68415ccb237b9f6c27ad659ce748db0c
Size: 7 MB
First Published: 2019-07-10 11:44:23 (5 years ago)
Latest Published: 2019-07-10 11:44:23 (5 years ago)
Status: Worm.Ramnit (on last analysis)
Analysis Date: 2019-07-10 11:44:23 (5 years ago)

Common Places:

%sysdrive%\materi workshop bos dikmen\master\data_master\program komputer\dokumen negara\famely\cooking academy

Geography:

100.0%

OS Version:

Windows 7 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0077a000

PE Sections:

Name Size of data MD5
.text 173843 7d96f26f0ef83343e1b44d4ac8c7d71c
.rdata 44124 76bd2c7288a36f133e45a0e8fc313a0b
.data 23316 0c3b588cdea8ae2c13bf6913e844c150
.rsrc 7416192 1c926d45d28c6c551c1f7c71fdc04201
.garr 4096 5387d67387d3552ff9c6ce7c7e6fe050
.mackt 8192 506411bb568b5313d6f5829b3905a759
.text 155648 3159e9b60c50dc17331f66e09b9f039c
bsyaqxq 0 00000000000000000000000000000000
.text 126976 efb5fcd141dac6563d7d02283df3c069

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for BellesBeautyBoutique.exe
copyright for information about BellesBeautyBoutique.exe