How to remove Restoro.exe

Restoro.exe

The module Restoro.exe has been detected as PUP.Restoro

Restoro.exe
Product Name:

Restoro

Company Name:

Restoro

MD5: 5755d55aad262408a116bf77ec8da51d
Size: 909 KB
First Published: 2020-04-04 11:38:02 (5 years ago)
Latest Published: 2025-07-08 23:00:45 (a month ago)
Status: PUP.Restoro (on last analysis)
Analysis Date: 2025-07-08 23:00:45 (a month ago)
Signed By: Restoro Ltd
Status: Valid
%profile%
%profile%
%profile%
%programfiles%
%profile%
%programfiles%
%sysdrive%\internet download manager
%sysdrive%\$recycle.bin
%profile%\downloads\garbage
%temp%
India 7.8%
Indonesia 7.5%
United States 6.8%
Germany 4.0%
Egypt 3.4%
Malaysia 3.3%
Italy 2.7%
Vietnam 2.6%
Pakistan 2.6%
Philippines 2.5%
Thailand 2.3%
United Kingdom 2.0%
South Africa 1.9%
Ukraine 1.8%
Australia 1.8%
Netherlands 1.7%
Spain 1.7%
United Arab Emirates 1.5%
France 1.4%
Turkey 1.4%
Austria 1.4%
Colombia 1.3%
Serbia 1.3%
Iran 1.3%
Croatia 1.2%
Kenya 1.2%
Mexico 1.2%
Poland 1.1%
Switzerland 1.1%
Nepal 1.1%
Bangladesh 0.9%
Algeria 0.9%
Ethiopia 0.9%
Jordan 0.9%
Romania 0.8%
Bulgaria 0.8%
Saudi Arabia 0.8%
Canada 0.7%
Nigeria 0.7%
Greece 0.7%
Brazil 0.7%
Denmark 0.7%
Iraq 0.7%
Hungary 0.7%
Costa Rica 0.7%
Sweden 0.7%
Peru 0.6%
Taiwan 0.6%
Cambodia 0.6%
Russia 0.6%
Lithuania 0.5%
Czech Republic 0.5%
Portugal 0.5%
Bahrain 0.5%
Yemen 0.5%
Sri Lanka 0.5%
South Korea 0.5%
Bosnia and Herzegovina 0.4%
Kuwait 0.4%
Belgium 0.4%
Argentina 0.4%
Syria 0.4%
Venezuela 0.4%
Tanzania 0.4%
Hong Kong 0.4%
Papua New Guinea 0.4%
Zimbabwe 0.4%
Israel 0.4%
Finland 0.4%
Mongolia 0.4%
Morocco 0.2%
Latvia 0.2%
Monaco 0.2%
New Zealand 0.2%
Norway 0.2%
Panama 0.2%
Estonia 0.2%
Uganda 0.2%
Iceland 0.2%
Zambia 0.2%
Kazakhstan 0.2%
Oman 0.2%
Slovakia 0.1%
Former Yugoslav Republic of Macedonia 0.1%
Puerto Rico 0.1%
Fiji 0.1%
Dominican Republic 0.1%
China 0.1%
Angola 0.1%
Lebanon 0.1%
Chile 0.1%
Ecuador 0.1%
Maldives 0.1%
undefined 0.1%
Windows 10 75.2%
Windows 7 17.2%
Windows 8.1 3.3%
Windows XP 2.0%
Windows 8 1.2%
Windows Vista 0.4%
Windows Server 2012 R2 0.3%
Windows Server 2008 R2 0.2%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000039e3

PE Sections:

Name Size of data MD5
.text 28672 f569e353af0ed51bf4c216faa9bed4e7
.rdata 11264 91eee43954e068e650f7b73a8b0e6915
.data 512 db9f7acbf1c3ddfe255077b699955dfa
.ndata 0 00000000000000000000000000000000
.rsrc 311296 e9b531db8df8769fbfb310e9d1f35486
.reloc 4096 f4ad22215006a677ade6a73cdeab789f

More information:

Download GridinSoft Anti-Malware - Removal tool for Restoro.exe
­