How to remove CNEPCINFO.EXE

CNEPCINFO.EXE

The module CNEPCINFO.EXE has been detected as Worm.Gen

CNEPCINFO.EXE
Remove CNEPCINFO.EXE

File Details

Product Name:

CnePCInfo
Company Name:

CNESTY
MD5: 9f0d358c72009e662a81a9cf57e2b470
Size: 444 KB
First Published: 2017-10-02 06:02:51 (7 years ago)
Latest Published: 2020-05-22 21:05:37 (4 years ago)
Status: Worm.Gen (on last analysis)
Analysis Date: 2020-05-22 21:05:37 (4 years ago)

Common Places:

%programfiles%\winnerstock\winnertrader\wtd\bin
%sysdrive%\동부증권\happyplus\bin
%sysdrive%\hi-five
%sysdrive%\동부증권\동부 drcm
%sysdrive%\동부증권\happyplus
%sysdrive%\db금융투자\happyplus
%sysdrive%\db금융투자\happyplus
%sysdrive%\$recycle.bin
%sysdrive%\$recycle.bin
%sysdrive%\$recycle.bin

File Names:

CnePCInfo.exe
CNEPCINFO.EXE

Geography:

100.0%

OS Version:

Windows 7 50.0%
Windows 10 41.7%
Windows 8.1 8.3%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00018735

PE Sections:

Name Size of data MD5
.text 286720 f88f767518e03dc08e433cbaf7ae0272
.rdata 73728 32e90731f2d09281b35ddcab6ecc690a
.data 12288 a4f6165d0457e8e0e7fa46f360c4d124
.rsrc 77824 6d2d47e8a274a762be1dc612a50a4290

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for CNEPCINFO.EXE
copyright for information about CNEPCINFO.EXE