How to remove RVCRESO.DLL
- File Details
- Overview
- Analysis
RVCRESO.DLL
The module RVCRESO.DLL has been detected as Worm.Ramnit
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
3d4b9ecb6d91af0ca2abc8ab0c2dcadf |
| Size: |
294 KB |
| First Published: |
2017-09-07 17:11:52 (7 years ago) |
| Latest Published: |
2017-09-07 17:11:52 (7 years ago) |
| Status: |
Worm.Ramnit (on last analysis) |
|
| Analysis Date: |
2017-09-07 17:11:52 (7 years ago) |
| %sysdrive%\vb60\visual basic 6.0\common\tools\vs-ent98\vmodeler |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x10000000 |
| Entry Address: |
0x0002c000 |
| Name |
Size of data |
MD5 |
| .text |
87040 |
6a1e1e86193b1c730acbdd95125d9b0e |
| .rdata |
21504 |
6fe6658cdf3d8ae71484a6f7a2403718 |
| .data |
6656 |
dcaceb672becf7e914036ae5314d6b2f |
| .rsrc |
19456 |
24d277ce86d2578b5f8acc0b71f2440d |
| .reloc |
14848 |
bc3ebd84087295db104c64977b72fe96 |
| .text |
150528 |
a7487b094290d54ec188a214361e62ff |
