How to remove SHUTDOWN_TIMER.EXE

SHUTDOWN_TIMER.EXE

The module SHUTDOWN_TIMER.EXE has been detected as Ransom.Wacatac

SHUTDOWN_TIMER.EXE
Product Name:

shutdown1

Company Name:

D

MD5: 70dc42f6be7e9d8d406d42f5cafdaa8d
Size: 36 KB
First Published: 2018-02-23 11:07:24 (7 years ago)
Latest Published: 2024-09-05 23:00:54 (5 months ago)
Status: Ransom.Wacatac (on last analysis)
Analysis Date: 2024-09-05 23:00:54 (5 months ago)
%programfiles%
%allusersprofile%\\start menu\programs
%desktop%\ \programes
100.0%
Windows XP 66.7%
Windows 10 33.3%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0000129c

PE Sections:

Name Size of data MD5
.text 24576 2c3550867755cb11764bc487de847212
.data 4096 620f0b67a91f7f74151bc5be745b7110
.rsrc 4096 3bf2d2de5a6523803cdb454513313be8

More information:

Download GridinSoft Anti-Malware - Removal tool for SHUTDOWN_TIMER.EXE