How to remove QMSmbSysMonx64_ev.sys

QMSmbSysMonx64_ev.sys

The module QMSmbSysMonx64_ev.sys has been detected as PUP.Tencent

QMSmbSysMonx64_ev.sys
Remove QMSmbSysMonx64_ev.sy

File Details

Product Name:

电脑管家
Company Name:

Tencent
MD5: 4c33195c5b7db4f448aa3d8ebf5bd2b1
Size: 44 KB
First Published: 2022-01-14 21:40:26 (3 years ago)
Latest Published: 2022-01-14 21:40:26 (3 years ago)
Status: PUP.Tencent (on last analysis)
Analysis Date: 2022-01-14 21:40:26 (3 years ago)

Overview

Signed By: Tencent Technology(Shenzhen) Company Limited;Microsoft Windows Hardware Compatibility Publisher
Status: Valid

Common Places:

%programfiles%\tencent\qqpcmgr

OS Version:

Windows 10 100.0%

Analysis

Subsystem: Native
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000000010000
Entry Address: 0x0000b064

PE Sections:

Name Size of data MD5
.text 19968 81e1e0d06363cd6906bb49de3d09b8c3
.rdata 2048 8f39ab68d56fa8044dea6f52f2dfb2af
.data 512 f425c86fa48e33269f447f3eb63c79f9
.pdata 1024 82ad5c8d19ee34f45fd65a98538420dd
INIT 2560 dee4ec8009e76c4fb65fb6bda0aace04
.rsrc 1024 8cabdcfd9325ddf78f938512f42e66d2
.reloc 512 a5403985bd38adfc8a94af4bb075e415

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for QMSmbSysMonx64_ev.sys
copyright for information about QMSmbSysMonx64_ev.sys