How to remove System.exe
System.exe
The module System.exe has been detected as Backdoor.Zegost
File Details
| Product Name: | Windows system files |
| Company Name: | Windows system files Inc. |
| MD5: | 6fd1bf25b1d733a9fdced83ae0e15546 |
| Size: | 161 KB |
| First Published: | 2017-09-14 14:04:33 (7 years ago) |
| Latest Published: | 2017-09-14 15:09:28 (7 years ago) |
| Status: | Backdoor.Zegost (on last analysis) | |
| Analysis Date: | 2017-09-14 15:09:28 (7 years ago) |
Common Places:
| %windir%\syswow64 |
| %sysdrive%\windows |
File Names:
| pasgrcwpa_net.exe |
| System.exe |
| System.exe.quarantined |
Geography:
| 100.0% |
OS Version:
| Windows Server 2008 R2 | 100.0% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x00014300 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 116224 | ec88d417aa17dc685d4deeb7a937bc6b |
| .rdata | 13824 | 814eef5f103f4995fae7d055b8d65d73 |
| .data | 31744 | 7e19cac073030d7e0f74fb368fae058a |
| .rsrc | 2048 | 544e7c992d46b4bc372ecf7efb858d63 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for System.exe
