How to remove PAGEANT.EXE

PAGEANT.EXE

The module PAGEANT.EXE has been detected as Trojan.Emotet

PAGEANT.EXE
Remove PAGEANT.EXE

File Details

Product Name:

PuTTY suite
Company Name:

Simon Tatham
MD5: 1b9b5c940e26d0e815a477b7e4609a38
Size: 306 KB
First Published: 2018-08-04 05:09:18 (6 years ago)
Latest Published: 2018-08-06 07:11:54 (6 years ago)
Status: Trojan.Emotet (on last analysis)
Analysis Date: 2018-08-06 07:11:54 (6 years ago)

Overview

Signed By: Simon Tatham
Status: Valid

Common Places:

%programfiles%
%programfiles%\matlab\r2017b\toolbox\idelink\foundation
%sysdrive%\filehistory\jifwhite\jifwhite-pc\data\$of\30845\30849 (2018_05_21 01_54_15 utc).zip\toolbox\target\supportpackages\shared_linuxservices\resources
%profile%\downloads\mathworks\supportpackages\r2018a\archives\win64\hardwaresupportpkgs\targets\shared_linuxservices_win64_1517957220.zip\toolbox\target\supportpackages\shared_linuxservices\resources

File Names:

pageant.exe
PAGEANT.EXE

Geography:

40.0%
40.0%
20.0%

OS Version:

Windows 10 80.0%
Windows 8.1 20.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000140000000
Entry Address: 0x0001bf60

PE Sections:

Name Size of data MD5
.text 200192 bf5f192564c300ebced0d3480886829d
.rdata 75776 dd6ce61abdc16df4e8655949042febdf
.data 4608 10ae2842df4b38f0ec607d1a2a93e995
.pdata 9216 e777b38914960281281d1a8047c2e70c
.rsrc 8704 63ee1e99cdf88c0b2d299f3931ebb15a
.reloc 2560 f5a4f40ec1b2d510b41ec96c7aa80597

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for PAGEANT.EXE
copyright for information about PAGEANT.EXE