How to remove SPtool64.exe.vir
- File Details
- Overview
- Analysis
SPtool64.exe.vir
The module SPtool64.exe.vir has been detected as Adware.ClientConnect
File Details
Product Name: |
|
Company Name: |
|
MD5: |
ed88d27771d421c2849ba7470dde77c8 |
Size: |
1 MB |
First Published: |
2017-05-29 11:14:17 (7 years ago) |
Latest Published: |
2021-03-25 21:27:37 (3 years ago) |
Status: |
Adware.ClientConnect (on last analysis) |
|
Analysis Date: |
2021-03-25 21:27:37 (3 years ago) |
Overview
%programfiles%\searchprotect\searchprotect\bin |
%sysdrive%\windows.old\program files\searchprotect\searchprotect |
%programfiles%\searchprotect\searchprotect |
%sysdrive%\adwcleaner\quarantine\c\program files (x86)\searchprotect\searchprotect |
%programfiles%\searchprotect\searchprotect |
%programfiles%\searchprotect\searchprotect |
SPtool64.exe |
SPtool64.exe.vir |
|
33.3% |
|
|
11.1% |
|
|
11.1% |
|
|
11.1% |
|
|
11.1% |
|
|
11.1% |
|
|
11.1% |
|
Windows 7 |
77.8% |
|
Windows Vista |
11.1% |
|
Windows 8.1 |
11.1% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
64 |
Image Base: |
0x0000000140000000 |
Entry Address: |
0x000cb314 |
Name |
Size of data |
MD5 |
.text |
993280 |
3e6ea67dea0878db82434fac2aecb7c2 |
.rdata |
425472 |
973d8875501705e410aea73cab5481d9 |
.data |
152064 |
b938dd71d2910a1a3e4dde103f4000e2 |
.pdata |
52224 |
c452283496c2e83052d2a2918b6350f7 |
.tls |
512 |
bf619eac0cdf3f68d496ea9344137e8b |
.rsrc |
108032 |
a9d75138ea07a73ef776f45a822ca1d6 |
.reloc |
16384 |
5ebf253977fd5f81226a72d342d4b342 |