How to remove RmDiskCp.exe

RmDiskCp.exe

The module RmDiskCp.exe has been detected as Worm.Ramnit

RmDiskCp.exe
Product Name:

RmDiskCp Application

Company Name:

eTinySoft Inc.

MD5: 0d1b6eb0ba94c57483d39f00f21cfd96
Size: 3 MB
First Published: 2017-12-18 12:05:59 (6 years ago)
Latest Published: 2017-12-18 12:05:59 (6 years ago)
Status: Worm.Ramnit (on last analysis)
Analysis Date: 2017-12-18 12:05:59 (6 years ago)
%sysdrive%\logiciel\converter 3gp
100.0%
Windows 7 100.0%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00343000

PE Sections:

Name Size of data MD5
.text 8192 6309ef3acf981a0e13042e1df21b05f0
.rdata 4096 98e475ffd3c4e222315550fda716c193
.data 4096 31e13cfb68d8cf3e8011957e2a11728c
.rsrc 110592 e1991f3a5ea53f398ef29b1191d0fce4
imtkxpl 0 00000000000000000000000000000000
.text 155648 736555a8e722bc8de194884b9f0f9769
juyrmxy 77824 aa64c43f7c9f5d3c65002c7c3f53bfaf
.text 188416 551d51e1eaf5b90c40f8296a808f07a0
ofnimyl 77824 84070b1b4367851d977b8c2596daf235
.text 217088 71356ffdbc0c13dda9dbbf881953545d
oakbgki 73728 2140a146b1ccc4e11e78cd7d513ef0f7
.text 249856 606ef701c284d6e270c37bd472d0e924
gxejjau 81920 4e1a2e4d65e02664545074e4b2b8865c
.text 409600 f05a5c81e846e970a95ef010ec4ceffc
pejzydk 0 00000000000000000000000000000000
.text 409600 739424b343ae08492f0dfab87673b83a
wpsdufb 0 00000000000000000000000000000000
.text 217088 7ff41a874170985cb08bf8a6d800b789
tlzuxya 0 00000000000000000000000000000000
.text 217088 37f880ca7050668d22dccbea3a3248a5
gdhopce 0 00000000000000000000000000000000
.text 409600 9b39961a63428a11e453ccb306af34eb
pcqrnjn 0 00000000000000000000000000000000
.text 188416 ca594df0b406780600b97ad8fa411921
nmkzgfb 32768 d46a0a36acdd0d46f085474cba65a81e
wssyljs 0 00000000000000000000000000000000
.text 249856 b180a9feec18ecaf8d0fdc5c2382a023
fvemlcn 0 00000000000000000000000000000000
.text 159744 9d76ed39032234d089ab3368bbcdcf8e

More information:

Download GridinSoft Anti-Malware - Removal tool for RmDiskCp.exe