How to remove QyUninst.exe.vir

QyUninst.exe.vir

The module QyUninst.exe.vir has been detected as PUP.Gen

QyUninst.exe.vir
Remove QyUninst.exe.vir

File Details

Product Name:

爱奇艺PPS影音
Company Name:

爱奇艺
MD5: 367067ce426d7f560b4e7b20e923747b
Size: 310 KB
First Published: 2017-05-30 16:08:25 (8 years ago)
Latest Published: 2021-01-10 11:04:55 (4 years ago)
Status: PUP.Gen (on last analysis)
Analysis Date: 2021-01-10 11:04:55 (4 years ago)

Overview

Signed By: BEIJING QIYI CENTURY SCIENCE@amp;TECHNOLOGY CO.,LTD.
Status: Valid

Common Places:

%sysdrive%\iqiyi video\lstyle
%sysdrive%\adwcleaner\quarantine\c\iqiyi video\lstyle
%sysdrive%\adwcleaner\quarantine\c\users\komputerkomputer\appdata\roaming\iqiyi video\lstyle
%appdata%\iqiyi video\lstyle
%sysdrive%\iqiyi video
%sysdrive%\adwcleaner\quarantine\c\iqiyi video
%appdata%\iqiyi video
%sysdrive%\adwcleaner\quarantine\c\users\ali\appdata\roaming\iqiyi video
%sysdrive%\adwcleaner\quarantine\gtxsl1c00g
%sysdrive%\iqiyi video

File Names:

QyUninst.exe
QyUninst.exe.vir

Geography:

14.3%
9.5%
9.5%
9.5%
4.8%
4.8%
4.8%
4.8%
4.8%
4.8%
4.8%
4.8%
4.8%
4.8%
4.8%
4.8%

OS Version:

Windows 10 47.6%
Windows 7 38.1%
Windows 8.1 14.3%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0000443f

PE Sections:

Name Size of data MD5
.text 32768 9089d67f8a0750d8eafc0227f419d60c
.rdata 5120 822d105df5649d1296048dad29d58f06
.data 5632 fc1e6b3d60a1338e0e904110a9d76b1b
.ndata 0 00000000000000000000000000000000
.rsrc 38912 f129665d69265424884779c7355129d7

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for QyUninst.exe.vir
copyright for information about QyUninst.exe.vir