How to remove FAHScreensaver.scr

FAHScreensaver.scr

The module FAHScreensaver.scr has been detected as RansomWin32.Gen

FAHScreensaver.scr
Remove FAHScreensaver.scr

File Details

MD5: 451dabf61a47b9d124a39d6ef29faa46
Size: 16 MB
First Published: 2020-03-09 10:16:26 (4 years ago)
Latest Published: 2021-09-17 20:30:16 (2 years ago)
Status: RansomWin32.Gen (on last analysis)
Analysis Date: 2021-09-17 20:30:16 (2 years ago)

Common Places:

%programfiles%
%programfiles%
%programfiles%
%programfiles%
%programfiles%
%programfiles%
%programfiles%

Geography:

28.6%
14.3%
14.3%
14.3%
14.3%
14.3%

OS Version:

Windows 10 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00001feb

PE Sections:

Name Size of data MD5
.text 4588032 c3a355f3c3f25b8e87842c8c76ab5f9f
.rdata 12261376 cd82880940e81f00ddb5c1d51ca70c92
.data 179712 e715410958d2d2ed2a7b36ed4b580f1d
.idata 10240 6ed3d46816ff5fd90c2224bffbad5d63
.gfids 3584 c361c1ee04c3ec349dc6c1b1424fe143
.00cfg 512 00e37b6aa8057707c36c24c1bab9938f
.tls 1024 c573bd7cea296a9c5d230ca6b5aee1a6
.rsrc 1024 b0bd9a1ced86791f5698fde58e0446f6
.reloc 231424 a1b0f5afe468d08aa4362de09f80cac0

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for FAHScreensaver.scr
copyright for information about FAHScreensaver.scr