How to remove HaoZipVirtualCDBus.sys

HaoZipVirtualCDBus.sys

The module HaoZipVirtualCDBus.sys has been detected as PUP.ChinAd

HaoZipVirtualCDBus.sys
Remove HaoZipVirtualCDBus.s

File Details

Product Name:

HaoZipCD
Company Name:

Shanghai RuiChuang
MD5: f3dd4da69d654df4703884ad72a74b52
Size: 211 KB
First Published: 2017-05-21 13:07:56 (8 years ago)
Latest Published: 2024-11-05 23:01:35 (a year ago)
Status: PUP.ChinAd (on last analysis)
Analysis Date: 2024-11-05 23:01:35 (a year ago)

Overview

Signed By: Shanghai 2345 Network Technology Co.,Ltd
Status: Valid

Common Places:

%programfiles%\2345soft\haozip
%programfiles%\2345soft
%programfiles%\2345soft
%programfiles%\2345soft
%programfiles%\2345soft
%programfiles%\2345soft
%programfiles%\2345soft
%programfiles%\2345soft
%programfiles%\2345soft

Geography:

56.9%
16.3%
12.5%
5.0%
1.9%
1.9%
1.3%
1.3%
0.6%
0.6%
0.6%
0.6%
0.6%

OS Version:

Windows 10 55.0%
Windows 7 25.0%
Windows Server 2008 R2 11.3%
Windows Server 2012 R2 5.0%
Windows Server 2012 1.3%
Windows 8.1 1.3%
Windows Server 2016 0.6%
Windows 8 0.6%

Analysis

Subsystem: Native
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000140000000
Entry Address: 0x00008850

PE Sections:

Name Size of data MD5
.text 159744 301713ad969761b9a4cf36f67e6f5db2
.rdata 21504 f19579b866231e9dbae4f7cfb46d8ab7
.data 512 3328801581476283cdd22431423ec57a
.pdata 9728 7940824ea2edf82d7c0776917900f13d
.CRT 512 bf619eac0cdf3f68d496ea9344137e8b
.STL 512 bf619eac0cdf3f68d496ea9344137e8b
INIT 3072 f4e21bdf439d5723502b00377a1a4174
.rsrc 1024 3851d57c1ce30029a135993036d0214e
.reloc 2048 d838e32b565dbcd9ffbb954b3fcfed51

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for HaoZipVirtualCDBus.sys
copyright for information about HaoZipVirtualCDBus.sys