How to remove Lara.Croft.Tomb.Raider.2001.avi.exe

Lara.Croft.Tomb.Raider.2001.avi.exe

The module Lara.Croft.Tomb.Raider.2001.avi.exe has been detected as Adware.InstalleRex

Lara.Croft.Tomb.Raider.2001.avi.exe
Product Name:

WinterSoft

Company Name:

WinterSoft

MD5: 47bbf4635eaf280756e14a12fee79ae1
Size: 304 KB
First Published: 2018-03-01 12:06:29 (6 years ago)
Latest Published: 2018-03-01 12:06:35 (6 years ago)
Status: Adware.InstalleRex (on last analysis)
Analysis Date: 2018-03-01 12:06:35 (6 years ago)
%sysdrive%\$recycle.bin\s-1-5-21-2190263935-2828028545-1150949999-1000\$rhuive8\backup set 2014-05-25 225130\backup files 2014-05-25 225130\backup files 1.zip\c\users\user\documents
%sysdrive%\$recycle.bin\s-1-5-21-2190263935-2828028545-1150949999-1000\$r5yy0zj\backup set 2014-04-28 185042\backup files 2014-04-28 185042\backup files 1.zip\c\users\user\documents
%sysdrive%\$recycle.bin\s-1-5-21-2190263935-2828028545-1150949999-1000\$rqp7qr6\backup set 2014-05-12 095416\backup files 2014-05-12 095416\backup files 1.zip\c\users\user\documents
%sysdrive%\$recycle.bin\s-1-5-21-2190263935-2828028545-1150949999-1000\$r55nbr8\backup set 2014-05-04 221044\backup files 2014-05-04 221044\backup files 1.zip\c\users\user\documents
%sysdrive%\$recycle.bin\s-1-5-21-2190263935-2828028545-1150949999-1000\$rg0dstx\backup set 2014-04-13 223413\backup files 2014-04-13 223413\backup files 1.zip\c\users\user\documents
100.0%
Windows 8.1 100.0%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000014db

PE Sections:

Name Size of data MD5
.text 7680 b1ae6dcdc3a7ba319c6d5e0b1a2eadbc
.rdata 2048 cd4f20f041a2da05dfe5974fe61bd4ec
.data 0 00000000000000000000000000000000
.rsrc 8704 664a9b5f7f89ce1b407d2a2c9892d0e5
.reloc 512 938152484b33bca77bd622973abb524e
.tsustub 121344 0223fda38c906ffa26ea5dfccdaf42fa
.tsuarch 164352 1e57f553528e86605d461d6594314c8c

More information:

Download GridinSoft Anti-Malware - Removal tool for Lara.Croft.Tomb.Raider.2001.avi.exe