How to remove RecoverKeysInstaller_GAOTD_Promo.exe

RecoverKeysInstaller_GAOTD_Promo.exe

The module RecoverKeysInstaller_GAOTD_Promo.exe has been detected as Adware.OpenCandy

RecoverKeysInstaller_GAOTD_Promo.exe
Remove RecoverKeysInstaller

File Details

Product Name:

Recover Keys

Company Name:

Recover Keys

MD5: 6a28e8664d841eb68d2fca5e2d841d01
Size: 6 MB
First Published: 2018-08-14 09:42:18 (6 years ago)
Latest Published: 2020-12-16 21:11:51 (4 years ago)
Status: Adware.OpenCandy (on last analysis)
Analysis Date: 2020-12-16 21:11:51 (4 years ago)

Overview

Signed By: ONE UP LTD.
Status: Valid

Common Places:

%sysdrive%\valer
%profile%
%sysdrive%\正版中国软件集合
%sysdrive%\all apps
%sysdrive%\downloads\giveaway of the day
%sysdrive%\theman-pc\backup set 2016-07-10 190001\backup files 2016-07-10 190001\backup files 1.zip\f\users\theman\documents
%sysdrive%\theman-pc\backup set 2016-06-24 160839\backup files 2016-06-24 160839\backup files 1.zip\f\users\theman\documents
%sysdrive%\theman-pc\backup set 2016-02-03 183736\backup files 2016-02-10 132418\backup files 1.zip\f\users\theman\documents
%sysdrive%\a
%sysdrive%\theman-pc\backup set 2016-03-06 190001\backup files 2016-03-06 190001\backup files 1.zip\f\users\theman\documents

Geography:

35.7%
21.4%
14.3%
7.1%
7.1%
7.1%
7.1%

OS Version:

Windows 10 53.3%
Windows 7 46.7%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000113bc

PE Sections:

Name Size of data MD5
.text 61952 3a126e478661f20816f9d9285615f98e
.itext 3072 ba48b9b17b3dd8b92da3bd93f20ddb34
.data 3584 d7fd5f4b562d7961758f3d6a8c834fd0
.bss 0 00000000000000000000000000000000
.idata 3584 93d91a2b90e60bd758fc0c4908856ae1
.tls 0 00000000000000000000000000000000
.rdata 512 3dffc444ccc131c9dcee18db49ee6403
.rsrc 328704 78d1489f9ab8f17b2be85c1e31546090

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for RecoverKeysInstaller_GAOTD_Promo.exe
copyright for information about RecoverKeysInstaller_GAOTD_Promo.exe