How to remove OntrackEasyRecovery.exe

OntrackEasyRecovery.exe

The module OntrackEasyRecovery.exe has been detected as Ransom.Sabsik

OntrackEasyRecovery.exe
Remove OntrackEasyRecovery.

File Details

Product Name:

WhereIsMyPhoto
MD5: b0e03253e11a5976aec7c262ddf9ee31
Size: 4 MB
First Published: 2022-03-15 23:21:53 (3 years ago)
Latest Published: 2022-03-15 23:21:53 (3 years ago)
Status: Ransom.Sabsik (on last analysis)
Analysis Date: 2022-03-15 23:21:53 (3 years ago)

Common Places:

%programfiles%\ontrack

Geography:

100.0%

OS Version:

Windows 7 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00001084

PE Sections:

Name Size of data MD5
.text 2471936 1cd4281c52eef8e602072267ef0fb584
.data 15872 3387c5ebc61fcdfcf10e5f85b9e566e5
.rdata 512 5d28a173f214c0163f435a059fb82152
.idata 6656 8f82e3cf9a72d9e5ec8260b169d21390
.rsrc 331264 2b5faa45a4a2b4615adc00a7f7d4f391
.reloe 2047999 8aaf3ec241bace935a3266ff1290386a

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for OntrackEasyRecovery.exe
copyright for information about OntrackEasyRecovery.exe