How to remove Rho.exe
Rho.exe
The module Rho.exe has been detected as General Threat
File Details
| Product Name: | mininewsrepair |
| MD5: | 2811b2ecde178f07a715d0d5e3866afe |
| Size: | 205 KB |
| First Published: | 2017-05-24 18:09:11 (7 years ago) |
| Latest Published: | 2018-12-20 01:05:34 (5 years ago) |
| Status: | General Threat (on last analysis) | |
| Analysis Date: | 2018-12-20 01:05:34 (5 years ago) |
Overview
| Signed By: | 上海广乐网络科技有限公司 |
| Status: | Valid |
Common Places:
| %localappdata%\temp |
| %appdata%\zhp\quarantine |
| %sysdrive%\windows.old\users\win 8\appdata\local\temp |
| %sysdrive%\windows.old.000\users\siswo\appdata\local\temp |
| %temp% |
| %sysdrive%\windows.old\users\porntiwa\appdata\local |
| %temp% |
| %temp% |
File Names:
| mininewsrepair.exe |
| Rho.exe |
| Lambda.exe |
Geography:
| 24.4% | ||
| 13.3% | ||
| 13.3% | ||
| 13.3% | ||
| 8.9% | ||
| 4.4% | ||
| 4.4% | ||
| 4.4% | ||
| 2.2% | ||
| 2.2% | ||
| 2.2% | ||
| 2.2% | ||
| 2.2% | ||
| 2.2% |
OS Version:
| Windows 7 | 60.0% | |
| Windows 10 | 24.4% | |
| Windows 8.1 | 11.1% | |
| Windows 8 | 4.4% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x0000e7d6 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 152064 | 9a7989860dc89f538e01f86f753f829d |
| .rdata | 32256 | 64f6cddd38e195c0afc7fb90f35377b3 |
| .data | 6656 | 69c447f6d5f515fe3d25416ad6f9b775 |
| .rsrc | 1024 | 22366d628c75607fd78c446f6aeb4092 |
| .reloc | 10240 | c5c8c16a498fb46640b5a82378370c14 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for Rho.exe
