How to remove NMCoFoundation.dll

NMCoFoundation.dll

The module NMCoFoundation.dll has been detected as Worm.Ramnit

NMCoFoundation.dll
Remove NMCoFoundation.dll

File Details

Product Name:

Nero Home
Company Name:

Nero AG
MD5: deb89446e1e777f5f01d752a287a4d13
Size: 580 KB
First Published: 2018-07-07 11:09:05 (5 years ago)
Latest Published: 2018-07-07 11:09:05 (5 years ago)
Status: Worm.Ramnit (on last analysis)
Analysis Date: 2018-07-07 11:09:05 (5 years ago)

Common Places:

%commondir%\ahead

Geography:

100.0%

OS Version:

Windows 7 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x10000000
Entry Address: 0x00076000

PE Sections:

Name Size of data MD5
.text 315392 df0f8c67bf480610d6054ce498147851
.orpc 4096 1679a2c643baf546515759c988efa5f1
.rdata 86016 c1182aa7194377c16f8ea4509b9e1548
.data 8192 c7120d885be376e06da66431d14efc4b
.tls 4096 620f0b67a91f7f74151bc5be745b7110
.rsrc 20480 35dc296a175c0ddb9389a3ab21c44e79
.reloc 40960 45c608fe20c4790240aebe45e356d9e3
.text 110592 b8a7159585ee00d0013170a7009adfae

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for NMCoFoundation.dll
copyright for information about NMCoFoundation.dll