How to remove NVCOSMB.DLL
- File Details
- Overview
- Analysis
NVCOSMB.DLL
The module NVCOSMB.DLL has been detected as Worm.Ramnit
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
411e30db70a9101ab907c78590313eb1 |
| Size: |
228 KB |
| First Published: |
2021-01-09 11:43:47 (4 years ago) |
| Latest Published: |
2021-01-09 11:43:47 (4 years ago) |
| Status: |
Worm.Ramnit (on last analysis) |
|
| Analysis Date: |
2021-01-09 11:43:47 (4 years ago) |
| %sysdrive%\data backup\double driver backup\mura-c8552657ec 2-18-2012 7-05-10 pm\system |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x10000000 |
| Entry Address: |
0x00020000 |
| Name |
Size of data |
MD5 |
| .text |
73728 |
10d72b3cbc3affeba0f220bb0198110b |
| .rdata |
24576 |
d119a137a7459e0d2739b1790f51816d |
| .data |
8192 |
593a05ba09da7455b912eafc411a054c |
| .rsrc |
4096 |
43d6f02c153b4f305d9fc7a25fb6c89d |
| .reloc |
8192 |
e2b87517d8af5b9b0abd5fd8afb4f5ff |
| .text |
110592 |
07d19276dce3acaf53c9452120ff33fa |
