How to remove P.SIV.exe
P.SIV.exe
The module P.SIV.exe has been detected as Trojan.CoinMiner
File Details
| Product Name: | SIV (System Information Viewer) |
| Company Name: | BELOFF |
| MD5: | f647c23d69dfcc97004dcbce88cb163b |
| Size: | 4 MB |
| First Published: | 2017-11-18 20:11:16 (7 years ago) |
| Latest Published: | 2018-01-12 14:26:37 (7 years ago) |
| Status: | Trojan.CoinMiner (on last analysis) | |
| Analysis Date: | 2018-01-12 14:26:37 (7 years ago) |
Common Places:
| %sysdrive%\проги\белофф |
Geography:
| 66.7% | ||
| 33.3% |
OS Version:
| Windows 7 | 66.7% | |
| Windows 10 | 33.3% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x000193af |
PE Sections:
| Name | Size of data | MD5 |
| .text | 101888 | c624ae421a6c4f702f7f2c2c23c4aef1 |
| .rdata | 16384 | 746f7c2df0aa9b117542dd3e6429f2f1 |
| .data | 2048 | 07f7ba027ce50640e9ee99eddca1959f |
| .rsrc | 17408 | 0a5c23baf6282937af4d6e5e9a66ef5f |
More information:
Download GridinSoft
Anti-Malware - Removal tool for P.SIV.exe
