How to remove InCDsrv.exe

InCDsrv.exe

The module InCDsrv.exe has been detected as Worm.Ramnit

InCDsrv.exe
Remove InCDsrv.exe

File Details

Product Name:

Nero AG incdsrv
Company Name:

Nero AG
MD5: 0c402c071ea5c1765f37444edbc2aac7
Size: 964 KB
First Published: 2024-04-15 23:01:29 (8 months ago)
Latest Published: 2024-04-15 23:01:29 (8 months ago)
Status: Worm.Ramnit (on last analysis)
Analysis Date: 2024-04-15 23:01:29 (8 months ago)

Common Places:

%sysdrive%\app\program\nero\neroexpress\incd reader

Geography:

100.0%

OS Version:

Windows 7 100.0%

Analysis

Subsystem: Windows CUI
PE Type: pe
OS Bitness: 32
Image Base: 0x01000000
Entry Address: 0x000ec000

PE Sections:

Name Size of data MD5
.text 818688 48d615b4150e519c026d4e8eada73d5f
.data 54272 f7a1cf19dd27ec7eab1fc10d8e3873b5
.tls 512 0a5d0efecf7d9f4ea0ccbaaa260628f1
.rsrc 1536 b1719d3713553dd07014454d6cf90ed3
.text 110592 e28e010d71720ae0cbbd70331c64a9c7

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for InCDsrv.exe
copyright for information about InCDsrv.exe