How to remove ICReinstall_KMPAddedCode_AtNeo.exe

ICReinstall_KMPAddedCode_AtNeo.exe

The module ICReinstall_KMPAddedCode_AtNeo.exe has been detected as Adware.InstallCore

ICReinstall_KMPAddedCode_AtNeo.exe
Remove ICReinstall_KMPAdded

File Details

Product Name:

Wizard

Company Name:

MD5: 2129aaf713d7f8513605884bdd034e21
Size: 1 MB
First Published: 2017-12-17 15:07:37 (6 years ago)
Latest Published: 2018-06-15 09:16:33 (6 years ago)
Status: Adware.InstallCore (on last analysis)
Analysis Date: 2018-06-15 09:16:33 (6 years ago)

Common Places:

%temp%
%localappdata%\microsoft\windows\inetcache\ie

File Names:

KMPAddedCode_OpperCD.exe
ICReinstall_KMPAddedCode_AtNeo.exe
kmplayer[1].exe

Geography:

33.3%
33.3%
16.7%
16.7%

OS Version:

Windows 7 50.0%
Windows 8.1 33.3%
Windows 10 16.7%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000113bc

PE Sections:

Name Size of data MD5
.text 61952 d7b160cedcea3cf2b0592bd41716ebb2
.itext 3072 ba48b9b17b3dd8b92da3bd93f20ddb34
.data 3584 d7fd5f4b562d7961758f3d6a8c834fd0
.bss 0 00000000000000000000000000000000
.idata 3584 93d91a2b90e60bd758fc0c4908856ae1
.tls 0 00000000000000000000000000000000
.rdata 512 3dffc444ccc131c9dcee18db49ee6403
.rsrc 64512 5ba05ead12398ee86fed38575fcc57de

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for ICReinstall_KMPAddedCode_AtNeo.exe
copyright for information about ICReinstall_KMPAddedCode_AtNeo.exe