How to remove ProtectorPackageRR2023x64a[2].exe

ProtectorPackageRR2023x64a[2].exe

The module ProtectorPackageRR2023x64a[2].exe has been detected as PUP.Reimage

ProtectorPackageRR2023x64a[2].exe
Remove ProtectorPackageRR20

File Details

Product Name:

Reimage Protector
Company Name:

Reimage
MD5: 8c70b6caabe6e3f16c2f866d2a30042a
Size: 5 MB
First Published: 2018-04-26 13:10:47 (5 years ago)
Latest Published: 2019-10-12 15:23:50 (4 years ago)
Status: PUP.Reimage (on last analysis)
Analysis Date: 2019-10-12 15:23:50 (4 years ago)

Overview

Signed By: Reimage Limited
Status: Valid

Common Places:

%localappdata%\microsoft\windows\temporary internet files\content.ie5
%localappdata%\microsoft\windows\inetcache\ie
%temp%
%sysdrive%\windows.old\users\kunal\appdata\local\microsoft\windows\inetcache\ie
%sysdrive%\vtroot\harddiskvolume3\users\sára měchurová\appdata\local\microsoft\windows\inetcache\ie
%appdata%\zhp\quarantine
%sysdrive%\windows.old\users\srico\appdata\local\microsoft\windows\temporary internet files\content.ie5
%sysdrive%\windows.old\users\jacky\appdata\local\microsoft\windows\temporary internet files\content.ie5
%sysdrive%\windows.old\users\joaco\appdata\local\microsoft\windows\inetcache\ie
%localappdata%\microsoft\windows\temporary internet files\content.ie5

File Names:

ProtectorPackageRR2023x64a[1].exe
UniProtectorPackage.exe
ProtectorPackageRR2023x64a[2].exe

Geography:

7.3%
6.5%
6.1%
6.0%
5.0%
5.0%
4.2%
3.8%
3.6%
3.4%
3.4%
3.2%
2.2%
2.1%
2.0%
1.9%
1.9%
1.9%
1.9%
1.7%
1.7%
1.6%
1.3%
1.2%
1.2%
1.0%
0.9%
0.9%
0.9%
0.7%
0.7%
0.7%
0.6%
0.5%
0.5%
0.5%
0.5%
0.5%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%

OS Version:

Windows 10 54.0%
Windows 7 36.8%
Windows 8.1 7.9%
Windows 8 0.8%
Windows Server 2008 R2 0.2%
Windows Server 2012 0.2%
Windows Server 2012 R2 0.1%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000039e3

PE Sections:

Name Size of data MD5
.text 28672 f569e353af0ed51bf4c216faa9bed4e7
.rdata 11264 91eee43954e068e650f7b73a8b0e6915
.data 512 db9f7acbf1c3ddfe255077b699955dfa
.ndata 0 00000000000000000000000000000000
.rsrc 37888 449403d597b417d6e99201356dcc8d64
.reloc 4096 2c316434694c914be32c098916724898

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for ProtectorPackageRR2023x64a[2].exe
copyright for information about ProtectorPackageRR2023x64a[2].exe