How to remove NIRCMD.EXE
NIRCMD.EXE
The module NIRCMD.EXE has been detected as Risk.Gen
File Details
Product Name: | NirCmd |
Company Name: | NirSoft |
MD5: | a73ab5b55e2ba276adc6fe160c1c211e |
Size: | 30 KB |
First Published: | 2017-10-11 02:12:57 (7 years ago) |
Latest Published: | 2017-11-17 05:08:59 (7 years ago) |
Status: | Risk.Gen (on last analysis) | |
Analysis Date: | 2017-11-17 05:08:59 (7 years ago) |
Common Places:
%sysdrive%\windows |
%mydoc%\usenet.nl\filemaster\anydvd hd v.6.6.7.0 final.rar (darkwolf)\anydvd+hd-6.7.8.0-preactivated\anydvd hd v6.7.8.0 pre-activated.exe |
%sysdrive%\system volume information\_restore{0fdf3f53-9e58-4899-805b-ec7155765af9}\rp1607 |
File Names:
nircmd.com |
NIRCMD.EXE |
A0154242.com |
Geography:
50.0% | ||
50.0% |
OS Version:
Windows XP | 50.0% | |
Windows 7 | 50.0% |
Analysis
Subsystem: | Windows GUI |
PE Type: | pe |
OS Bitness: | 32 |
Image Base: | 0x00400000 |
Entry Address: | 0x00012920 |
PE Sections:
Name | Size of data | MD5 |
UPX0 | 0 | 00000000000000000000000000000000 |
UPX1 | 27648 | b6b887f4c8dc0df80b09cc411e65540b |
.rsrc | 2048 | 4afff90130414da1669f7113fa7bf00c |
More information:
Download GridinSoft
Anti-Malware - Removal tool for NIRCMD.EXE