How to remove P.SIV.exe
P.SIV.exe
The module P.SIV.exe has been detected as Trojan.CoinMiner
File Details
| Product Name: | SIV (System Information Viewer) |
| Company Name: | BELOFF |
| MD5: | d7dcb39571f6670c9246f1f48e0f0cc7 |
| Size: | 4 MB |
| First Published: | 2017-10-12 07:08:26 (7 years ago) |
| Latest Published: | 2018-01-12 14:17:18 (7 years ago) |
| Status: | Trojan.CoinMiner (on last analysis) | |
| Analysis Date: | 2018-01-12 14:17:18 (7 years ago) |
Common Places:
| %sysdrive%\компьютер\белофф |
Geography:
| 60.0% | ||
| 20.0% | ||
| 20.0% |
OS Version:
| Windows 7 | 80.0% | |
| Windows 10 | 20.0% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x000193af |
PE Sections:
| Name | Size of data | MD5 |
| .text | 101888 | c624ae421a6c4f702f7f2c2c23c4aef1 |
| .rdata | 16384 | 746f7c2df0aa9b117542dd3e6429f2f1 |
| .data | 2048 | 07f7ba027ce50640e9ee99eddca1959f |
| .rsrc | 17408 | a66584c4412f6a299ec2c71b6bb22a9f |
More information:
Download GridinSoft
Anti-Malware - Removal tool for P.SIV.exe
