How to remove RSCNTL22.DLL
- File Details
- Overview
- Analysis
RSCNTL22.DLL
The module RSCNTL22.DLL has been detected as Worm.Ramnit
File Details
Product Name: |
|
Company Name: |
|
MD5: |
ca022d6c999cd3aadf59d17223bdbbe3 |
Size: |
193 KB |
First Published: |
2017-09-07 17:11:45 (7 years ago) |
Latest Published: |
2017-09-07 17:11:45 (7 years ago) |
Status: |
Worm.Ramnit (on last analysis) |
|
Analysis Date: |
2017-09-07 17:11:45 (7 years ago) |
%programfiles%\microsoft visual studio\common\tools\vs-ent98\vmodeler |
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x0e400000 |
Entry Address: |
0x00016000 |
Name |
Size of data |
MD5 |
.text |
31232 |
eda9eb433ebfbc7757c4c2c7593ae2c5 |
SFX_INIT |
1024 |
ecfbbef38a79d27de9b68312a659f212 |
SFX_DBG1 |
512 |
0904161e56c6889cb18be3ad6ed16d67 |
SFX_DBG2 |
512 |
52a72bea9875d0be39c157f295ab51f2 |
SFX_AUX |
512 |
89141b93263bc0658404849b4caabd61 |
SFX_CORE |
1024 |
dda549efd908f1c69aa540edb2c1e415 |
SFX_TERM |
512 |
9e990283afeaf128ea38e3599d93eb25 |
.rdata |
512 |
289e64be3a93c1a44f7a7fa4470aaea4 |
.data |
5120 |
a9ce53f6febe66fe604db0b56266c2b2 |
.idata |
2048 |
0601e99923741936ea99f1cd5d88fa31 |
.rsrc |
1024 |
3838fd73cee48a6fc693eb216ccc8ef4 |
.reloc |
2560 |
2227c6572094533d3303cf488e4e1b27 |
.text |
150528 |
cc678cf9ec07744a37d2fe1e736f5e9e |