How to remove ROBoot64.exe

ROBoot64.exe

The module ROBoot64.exe has been detected as PUP.Solvusoft

ROBoot64.exe
Remove ROBoot64.exe

File Details

Product Name:

WinThruster
Company Name:

solvusoft
MD5: 4233f5196ad66ed816848843fcd7ea11
Size: 19 KB
First Published: 2017-05-22 10:19:35 (6 years ago)
Latest Published: 2023-10-10 23:05:30 (6 months ago)
Status: PUP.Solvusoft (on last analysis)
Analysis Date: 2023-10-10 23:05:30 (6 months ago)

Overview

Signed By: Solvusoft Corporation
Status: Valid

Common Places:

%windir%\system32
%sysdrive%\adwcleaner\quarantine\8yfogkjxrr
%sysdrive%\adwcleaner\quarantine\jboh8s4kwi
%sysdrive%\system recovery\repair\backup
%sysdrive%\adwcleaner\quarantine\nisnrmwuln
%system%
%sysdrive%\adwcleaner\quarantine
%desktop%\ago\winthruster\winthruster_2014
%desktop%\ago\winthruster\winthruster_2014\winthruster_2014
%sysdrive%\$windows.~bt\newos\windows

File Names:

roboot64.exe
ROBoot64.exe
40F32921C92EC0F4F7587EF828B068E9633A02E9.exe
ROBoot64-2017-10-06_15-00-37-548.exe

Geography:

35.1%
20.1%
5.7%
5.6%
3.2%
2.9%
2.9%
2.6%
2.1%
1.8%
1.6%
1.3%
1.3%
0.9%
0.9%
0.9%
0.8%
0.8%
0.8%
0.6%
0.6%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%

OS Version:

Windows 10 45.7%
Windows 7 41.8%
Windows 8.1 10.2%
Windows 8 2.1%
Windows Vista 0.3%

Analysis

Subsystem: Native
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000100000000
Entry Address: 0x0000247c

PE Sections:

Name Size of data MD5
.text 9728 219fecd3cfda4d8b10045f836868dcf3
.data 512 043c46095689123e1f5be96c109c2f46
.pdata 512 522e7ece45fc23ef8ecf7d65ea5148e5
.rsrc 1536 897db0f45a8e15165a9ee3089b2a5a0e
.reloc 512 4c69442f94342f01c9eecc224c99f9b1

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for ROBoot64.exe
copyright for information about ROBoot64.exe