How to remove TotalAV.exe.389.old
- File Details
- Overview
- Analysis
TotalAV.exe.389.old
The module TotalAV.exe.389.old has been detected as PUP.FakeAV
File Details
Product Name: |
|
MD5: |
7c5dab3b999d667a71ac2f584a99bf74 |
Size: |
2 MB |
First Published: |
2017-08-25 17:04:55 (7 years ago) |
Latest Published: |
2018-09-30 21:15:01 (6 years ago) |
Status: |
PUP.FakeAV (on last analysis) |
|
Analysis Date: |
2018-09-30 21:15:01 (6 years ago) |
Overview
%programfiles%\totalav |
%programfiles% |
%sysdrive%\$recycle.bin |
%sysdrive%\windows.old\program files (x86) |
TotalAV.exe |
TotalAV.exe.389.old |
TotalAV.exe.0.old |
TotalAV.exe.1.old |
$RCMIPNS.exe |
|
48.7% |
|
|
20.5% |
|
|
10.3% |
|
|
5.1% |
|
|
5.1% |
|
|
2.6% |
|
|
2.6% |
|
|
2.6% |
|
|
2.6% |
|
Windows 10 |
76.9% |
|
Windows 7 |
17.9% |
|
Windows 8.1 |
5.1% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x0021f54e |
MVID: |
abfb3d16-f8ab-43bf-b91a-8eb57f012e27 |
Name |
Size of data |
MD5 |
.text |
2217472 |
a9e4d4bf391dc9614591964180bcb548 |
.rsrc |
401408 |
0308caf14c01ade52c786e6eba338f7c |
.reloc |
512 |
c449da97cae167574900696723f59f9d |