How to remove ENCSET.EXE

ENCSET.EXE

The module ENCSET.EXE has been detected as Ransom.Wacatac

ENCSET.EXE
Product Name:

Microsoft Encarta

Company Name:

Microsoft Corporation

MD5: 717bac4a479bbbe95176eef03b89349a
Size: 8 KB
First Published: 2023-07-13 23:51:31 (2 years ago)
Latest Published: 2024-07-19 23:01:13 (2 years ago)
Status: Ransom.Wacatac (on last analysis)
Analysis Date: 2024-07-19 23:01:13 (2 years ago)
%sysdrive%\removable disk\microsoft student with encarta premium 2009 (2)\microsoft student with encarta premium 2009\ee
%sysdrive%\removable disk\microsoft student with encarta premium 2009 (2)\microsoft student with encarta premium 2009\ee
%programfiles%\microsoft encarta
%programfiles%\microsoft encarta
%desktop%\desktop\encarta2009\e09exlrd1 (e)\ee
%programfiles%\microsoft encarta
%mydoc%\drivers\e09exlrd1\ee
%programfiles%\microsoft student
%programfiles%\microsoft student
22.2%
22.2%
22.2%
11.1%
11.1%
11.1%
Windows 10 55.6%
Windows 7 33.3%
Windows 8.1 11.1%
Subsystem: Windows CUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0000173f

PE Sections:

Name Size of data MD5
.text 3072 d12421f92f637afe2e9e07ecb9a27208
.rdata 2048 b232e89fd330349c8d63d6a65b639713
.data 512 e2b23683a8b8935f281d74e560c5fad8
.rsrc 2048 6f816057aae6c39040a348286a64e781

More information:

Download GridinSoft Anti-Malware - Removal tool for ENCSET.EXE